Yüksek CISA KEV
CVE-2018-14667: Red Hat JBoss RichFaces Framework: aktif olarak istismar edilen açık
Açıklama (NVD)
Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
Özet bilgiler
- EPSS
- %74,20 (yüzdelik 99)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2023-09-28 · Son tarih: 2023-10-19
Gerekli aksiyon: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.