CVE-2018-14667
Fixed in a distro release ExploitedEPSS 74%CVSS 9.8
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
Products: redhat richfaces, redhat enterprise_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.richfaces:richfaces-core | 3.3.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 5 | richfaces | 0:3.3.1-9.SP3_patch_03.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces | 0:3.3.1-6.SP3_patch_03.ep5.el6 |
| Red Hat jboss enterprise application platform 5 | richfaces-cdk | 0:3.3.1-9.SP3_patch_03.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-demo | 0:3.3.1-9.SP3_patch_03.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-demo | 0:3.3.1-6.SP3_patch_03.ep5.el6 |
| Red Hat jboss enterprise application platform 5 | richfaces-docs | 0:3.3.1-9.SP3_patch_03.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-framework | 0:3.3.1-9.SP3_patch_03.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-framework | 0:3.3.1-6.SP3_patch_03.ep5.el6 |
| Red Hat jboss enterprise application platform 5 | richfaces-root | 0:3.3.1-9.SP3_patch_03.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-root | 0:3.3.1-6.SP3_patch_03.ep5.el6 |
| Red Hat jboss enterprise application platform 5 | richfaces-ui | 0:3.3.1-9.SP3_patch_03.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | richfaces-ui | 0:3.3.1-6.SP3_patch_03.ep5.el6 |