What is GHSA-3hx6-fqpj-xfjr?

GHSA-3hx6-fqpj-xfjr is a security advisory published by GitHub Security Advisories with Critical severity. RichFaces vulnerable to Expression Language Injection

Which CVE IDs does GHSA-3hx6-fqpj-xfjr cover?

GHSA-3hx6-fqpj-xfjr covers the following CVE IDs: CVE-2018-12532. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3hx6-fqpj-xfjr?

GHSA-3hx6-fqpj-xfjr has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-3hx6-fqpj-xfjr?

GHSA-3hx6-fqpj-xfjr affects 1 product, including: maven/org.richfaces:richfaces-core:\u003e= 4.5.3.Final, \u003c= 4.5.17.Final.

GHSA-3hx6-fqpj-xfjrCriticalCVSS 9.8

RichFaces vulnerable to Expression Language Injection

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

January 29, 2023

🔗 CVE IDs covered (1)

CVE-2018-12532 →

📋 Description

JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309.

🎯 Affected products1

maven/org.richfaces:richfaces-core:>= 4.5.3.Final, <= 4.5.17.Final

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2018-12532
https://codewhitesec.blogspot.com/2018/05/poor-richfaces.html
http://seclists.org/fulldisclosure/2020/Mar/21
https://github.com/advisories/GHSA-3hx6-fqpj-xfjr