GitHub Advisoryadvisory · Maven

GHSA-3hx6-fqpj-xfjr RichFaces vulnerable to Expression Language Injection

CRITICAL Published 2022-05-13 Modified 2022-11-08 Official page ↗
Aliases
CVE-2018-12532
Ecosystem
Maven
Packages
org.richfaces:richfaces-core
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-917
Reviewed
2022-11-08

Affected packages

• Maven org.richfaces:richfaces-core: >= 4.5.3.Final, <= 4.5.17.Final (no fix yet)

Description

JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309.

Related

Alias · CVE (1)

  • CVE-2018-12532 JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable… vulnerability

Weakness · CWE (1)

  • CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement weakness

References