GHSA-4j38-wjhf-884rCriticalCVSS 9.8

Arbitrary code execution in Richfaces

Published
May 13, 2022
Last Modified
January 29, 2023

🔗 CVE IDs covered (1)

CVE-2018-12533 →

📋 Description

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.

🎯 Affected products1

  • maven/org.richfaces:richfaces-core:>= 3.1.0, <= 3.3.4

🔗 References (7)