CVE-2018-14667CISA KEV: Actively Exploited

Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

Published Sep 28, 2023·Updated Sep 28, 2023

Description

Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.

Public Exploits & PoCs4 found

PoC: CVE-2018-14667

All about CVE-2018-14667; From what it is to how to successfully exploit it.

PoC: CVE-2018-14667-poc

CVE-2018-14667-poc Richfaces漏洞环境及PoC

PoC: CVE-2018-14667

about CVE-2018-14667 from RichFaces Framework 3.3.4

PoC: cve-2018-14667

cve-2018-14667 demo

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free