Red Hat Security Advisory

RHSA-2018:3581

Red Hat JBoss BRMS 5.3.1 security update

Released 2018-11-13 · Red Hat rating Critical · View on Red Hat →

Fixed in

TI-2018-10530 CVE-2018-14667 · GHSA-j7mw-7crr-658v

CRITICAL 100KEV

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.74202 Published 2018-11-06 Partial fix · 3.3.4 CWE-94