Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS0zaHg2LWZxcGoteGZqcs386w
RichFaces vulnerable to Expression Language Injection
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309.
Permalink: https://github.com/advisories/GHSA-3hx6-fqpj-xfjrJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zaHg2LWZxcGoteGZqcs386w
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: over 1 year ago
Updated: 8 months ago
CVSS Score: 9.8
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Identifiers: GHSA-3hx6-fqpj-xfjr, CVE-2018-12532
References:
- https://nvd.nist.gov/vuln/detail/CVE-2018-12532
- https://codewhitesec.blogspot.com/2018/05/poor-richfaces.html
- http://seclists.org/fulldisclosure/2020/Mar/21
- https://github.com/advisories/GHSA-3hx6-fqpj-xfjr
Affected Packages
maven:org.richfaces:richfaces-core
Versions: >= 4.5.3.Final, <= 4.5.17.FinalNo known fixed version