Описание
JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Broken LinkVendor Advisory
- Issue TrackingVendor Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Broken LinkVendor Advisory
- Issue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 4.0.0 (включая) до 4.5.4 (включая)
cpe:2.3:a:redhat:richfaces:*:*:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.06506
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-94
Связанные уязвимости
redhat
почти 11 лет назад
JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.
github
больше 3 лет назад
JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.
EPSS
Процентиль: 91%
0.06506
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-94