GHSA-3hx6-fqpj-xfjr

ghsaUSosv

RichFaces vulnerable to Expression Language Injection

view advisory published 2022-05-13Licence: CC-BY-4.0

JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-12532US	critical9.8	6.80% (94th)	—	2018-06-18
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a M…

references

External citations — patches, advisories, analysis.

http://seclists.org/fulldisclosure/2020/Mar/21WEB
https://codewhitesec.blogspot.com/2018/05/poor-richfaces.htmlWEB
https://nvd.nist.gov/vuln/detail/CVE-2018-12532ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan