PT-2018-12653

Name of the Vulnerable Software and Affected Versions RichFaces Framework versions 3.X through 3.3.4 Description The RichFaces Framework is susceptible to Expression Language EL injection through the UserResource resource. A remote, unauthenticated attacker can potentially execute arbitrary code ...