Joao Filho Matos Figueiredo

#15841de 60,401
19.6CVSS total
Vulnerabilidades · 2
Crítica
2
PT-2018-12653
2018-11-06
9.8
CVE-2018-14667
Red Hat
Red Hat Jboss Richfaces Framework
The RichFaces Framework is susceptible to Expression Language (EL) injection through the UserResource resource. A remote, unauthenticated attacker can potentially execute arbitrary code by exploiting a chain of Java serialized objects via `org.ajax4jsf.resource.UserResource$UriData`. This issue is currently being exploited in attacks, as indicated by CISA advisories.
PT-2017-17777
2017-05-19
9.8
CVE-2017-7504
Red Hat
Jbossmq
The issue allows remote attackers to execute arbitrary code via crafted serialized data due to a lack of restriction on the classes for which deserialization is performed in the JMS over HTTP Invocation Layer of the JbossMQ implementation.