CVE-2018-14667

CVE-2018-14667 affects Red Hat JBoss RichFaces Framework 3.X up to 3.3.4, introducing an EL injection via UserResource$UriData that enables remote, unauthenticated code execution. The issue arises from EL expression handling in the UserResource resource, allowing a chain of Java serialized object...

CVE-2013-2165

CVE-2013-2165 is a deserialization vulnerability in RichFaces implementations (3.x–5.x) across Red Hat JBoss components that does not restrict which classes’ deserialization methods can be invoked, allowing remote attackers to execute arbitrary code via crafted serialized data. Affected products ...

CVE-2018-12533

CVE-2018-12533 affects Red Hat JBoss RichFaces 3.1.0–3.3.4, enabling unauthenticated attackers to inject EL expressions and execute arbitrary Java code via a /DATA/ path substring in a request containing a org.richfaces.renderkit.html.Paint2DResource$ImageData object (RF-14310). Public detail in ...

CVE-2015-0279

CVE-2015-0279 affects JBoss RichFaces prior to 4.5.4. A flaw in parsing the HTTP request parameter named the do parameter allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code on the server. This is described as a reverse-engineered EL injection th...

CVE-2014-0086

CVE-2014-0086 affects JBoss RichFaces: doFilter in webapp/PushHandlerFilter.java on RichFaces 4.3.4, 4.3.5 and 5.x is vulnerable to remote DoS via a flood of malformed Atmosphere push requests. Root cause: inadequate input filtering in PushHandlerFilter.java leads to memory consumption and out-of...

CVE-2018-12532

CVE-2018-12532 affects JBoss RichFaces 4.5.3 through 4.5.17. It allows unauthenticated remote attackers to inject an arbitrary Expression Language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource’s resource request (RF-14309). This is a server-side code execution ris...