org.richfaces:richfaces-push-depchain (=5.0.0.Alpha2) potentially affected by CVE-2014-0086 via org.richfaces:richfaces (=5.0.0.Alpha2)

org.richfaces:richfaces MAVEN version =5.0.0.Alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.richfaces:richfaces and may be impacted: - org.richfaces:richfaces-push-depchain =5.0.0.Alpha2 Source cves: CVE-2014-0086 Source advisory:...

The vulnerability of the RichFaces library, related to errors in code generation, allows attackers to execute arbitrary Java code.

The vulnerability of the RichFaces library is related to errors in code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary Java code with privileges of the target server...