Red Hat Security Advisory

RHSA-2015:0719

Red Hat JBoss Web Framework Kit 2.7.0 security update

Released 2015-03-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Web Framework Kit 2.7

Fixes 1 record

TI-2015-00246 CVE-2015-0279 · GHSA-8cc3-p77g-5pcc

JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL)…

LOW 37

JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03929 Published 2015-03-26 Partial fix CWE-94