Vulnetix
Try Vulnetix Request Demo
CVE-2018-12533 PUBLISHED CVSS 7.5 HIGH

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.

EPSS 75.47% · 98.9th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
75.47%
98.9th percentile

Affected Products

VendorProductVersions
Mavenorg.richfaces:richfaces-core3.1.0
n/an/an/a
redhatrichfaces3.1.0

Timeline

References

Open in Interactive Console →