CVE-2018-12532

JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309.

Published: Jun 18, 2018
Updated: May 9, 2024
CVE: CVE-2018-12532
GHSA: GHSA-3hx6-fqpj-xfjr
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-917

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
redhat / richfaces	4.5.3	4.5.17.x
org.richfaces / richfaces-core	4.5.3.Final	4.5.17.final.x

http://seclists.org/fulldisclosure/2020/Mar/21
http://www.securityfocus.com/bid/104503
https://codewhitesec.blogspot.com/2018/05/poor-richfaces.html

Vulnerability Database

CVE-2018-12532

Deep Security Visibility Without the Complexity