~ / search / GHSA-4j38-wjhf-884r

GHSA-4j38-wjhf-884r

Arbitrary code execution in Richfaces

Source: GitHub Advisory Database (reviewed) Critical CVE-2018-12533

Packages

EcosystemPackageAffectedFixed in
Maven org.richfaces:richfaces-core >= 3.1.0, <= 3.3.4 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.

References

External links from the advisory. They lead to third-party sites.