CVE-2018-14667 Red Hat JBoss RichFaces Framework
Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
- CVSS
- not scored
On CISA’s exploited list
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
- Added
- 2023-09-28
- Federal patch deadline
- 2023-10-19
- Ransomware use
- not known