Read the docs
Red Hat Security Advisory

RHSA-2014:0335

Red Hat JBoss Web Framework Kit 2.5.0 update

Released 2014-03-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 23

The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a large number of malf…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01451 Published 2014-03-28 Partial fix · 5.0.0.Alpha3 CWE-20