PT-2018-11239 · Red Hat · Jboss Richfaces

Published 2018-06-18 · Updated 2022-05-13 · CVE-2018-12532

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JBoss RichFaces versions 4.5.3 through 4.5.17

Description The issue allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request.

Recommendations For JBoss RichFaces versions 4.5.3 through 4.5.17, update to a version outside of the affected range to mitigate the risk of arbitrary Java code execution.

Exploit

Fix

Weakness Enumeration

CWE-917

Related Identifiers

CVE-2018-12532

GHSA-3HX6-FQPJ-XFJR

Affected Products

Jboss Richfaces

References · 6

• 🔥 https://codewhitesec.blogspot.com/2018/05/poor-richfaces.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-12532 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12532 · Security Note
• https://osv.dev/vulnerability/GHSA-3hx6-fqpj-xfjr · Vendor Advisory
• http://securityfocus.com/bid/104503 · Note
• http://seclists.org/fulldisclosure/2020/Mar/21 · Note