* Emmanuel Bourg: > - CVE-2013-3827 is related to Java Server Faces, but I couldn't find any > code related to JSF (grep -R 'import javax.faces') This is probably about the components imported from Mojarra into Glassfish.