Red Hat Security Advisory

RHSA-2018:2663

Red Hat JBoss Enterprise Application Platform 5.2 security update

Released 2018-09-10 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 5.2

Fixes 1 record

TI-2018-08993 CVE-2018-12533 · GHSA-4j38-wjhf-884r

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject…

MEDIUM 60

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.18681 Published 2018-06-18 Partial fix CWE-917