← CVE Radar
CVE-2018-14667Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
9.8 CRITICALEPSS 74.20%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.0redhat (CNA) | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2018-14667
- Status
- Published
- Assigner (CNA)
- redhat
- Published
- Nov 6, 2018
- Last modified
- 2025-10-21 23:45 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
[UNKNOWN]RichFaces1 version range
- affected 3.X through 3.3.4
References
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:3519
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:3581
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:3518
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:3517
- securitytracker.com http://www.securitytracker.com/id/1042037
- packetstormsecurity.com http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html
- seclists.org http://seclists.org/fulldisclosure/2020/Mar/21
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS