CVE-2018-12533
Fixed in a distro release EPSS 19%
JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.
Products: redhat richfaces
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.richfaces:richfaces-core | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 5 | richfaces | 0:3.3.1-7.SP3_patch_02.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces | 0:3.3.1-4.SP3_patch_02.ep5.el6_10 |
| Red Hat jboss enterprise application platform 5 | richfaces-cdk | 0:3.3.1-7.SP3_patch_02.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-demo | 0:3.3.1-7.SP3_patch_02.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-demo | 0:3.3.1-4.SP3_patch_02.ep5.el6_10 |
| Red Hat jboss enterprise application platform 5 | richfaces-docs | 0:3.3.1-7.SP3_patch_02.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-framework | 0:3.3.1-7.SP3_patch_02.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-framework | 0:3.3.1-4.SP3_patch_02.ep5.el6_10 |
| Red Hat jboss enterprise application platform 5 | richfaces-root | 0:3.3.1-7.SP3_patch_02.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-root | 0:3.3.1-4.SP3_patch_02.ep5.el6_10 |
| Red Hat jboss enterprise application platform 5 | richfaces-ui | 0:3.3.1-7.SP3_patch_02.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-ui | 0:3.3.1-4.SP3_patch_02.ep5.el6_10 |