Lucene search
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_113119HistoryJan 19, 2022 - 12:00 a.m.
PrimeFaces 4.0.x < 4.0.25 / 5.x < 5.2.21 / 5.3.x < 5.3.8 Expression Language Injection
2022-01-1900:00:00
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
112
In affected versions of PrimeFaces, an expression language injection vulnerability exists that would allow an unauthenticated user to execute arbitrary code due to a weak encryption flaw.
No source data| Vendor | Product | Version | CPE |
|---|---|---|---|
| primetek | primefaces | * | cpe:2.3:a:primetek:primefaces:*:*:*:*:*:*:*:* |