Skip to content
OpenAdvisories
Unscored RHSA-2013:1043 1 CVE

Red Hat Security Advisory: richfaces security update

Published Sep 15, 2024 · Updated Jan 29, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el5 richfaces 0:3.3.1-6.SP3_patch_01.ep5.el5
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el5 richfaces-demo 0:3.3.1-6.SP3_patch_01.ep5.el5
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el5 richfaces-framework 0:3.3.1-6.SP3_patch_01.ep5.el5
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el5 richfaces-root 0:3.3.1-6.SP3_patch_01.ep5.el5
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el5 richfaces-ui 0:3.3.1-6.SP3_patch_01.ep5.el5
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el6 richfaces 0:3.3.1-3.SP3_patch_01.ep5.el6
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el6 richfaces-demo 0:3.3.1-3.SP3_patch_01.ep5.el6
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el6 richfaces-framework 0:3.3.1-3.SP3_patch_01.ep5.el6
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el6 richfaces-root 0:3.3.1-3.SP3_patch_01.ep5.el6
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el6 richfaces-ui 0:3.3.1-3.SP3_patch_01.ep5.el6

Vulnerabilities 1

  • High —
    CVE-2013-2165 Public exploit EPSS 13%

    Remote code execution due to insecure deserialization

    ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat…

    org.richfaces:richfaces Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=973570
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1043.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-2165
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-2165
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-2165