Product · [UNKNOWN]

RichFaces

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2018-14667 Exploited Public exploit EPSS 74%

Richfaces vulnerable to arbitrary code execution

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4…

[UNKNOWN] RichFaces org.richfaces:richfaces-core Maven

Nov 6, 2018
KEV Sep 28, 2023