org.richfaces:richfaces-a4j@4.5.0.Beta2 vulnerabilities

latest version

4.5.17.Final

first published

10 years ago

latest version published

8 years ago

licenses detected

LGPL-2.1
[4.5.0.Alpha3,)

package manager

View on Maven Repository

Go back to all versions of this package

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.richfaces:richfaces-a4j package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
C Arbitrary Code Execution org.richfaces:richfaces-a4j is an advanced UI component framework for easily integrating Ajax capabilities into business applications using JSF. Affected versions of this package are vulnerable to Arbitrary Code Execution. An attacker may be able to inject arbitrary EL variable mapper, thus bypassing the mitigation for CVE-2015-0279 Note: CVE-2018-12532 is a duplicate of CVE-2018-10848. How to fix Arbitrary Code Execution? There is no fix for `org.richfaces:richfaces-a4j`. Richfaces has reached EOL.	[0,)
M Arbitrary Code Execution org.richfaces:richfaces-a4j is an advanced UI component framework for easily integrating Ajax capabilities into business applications using JSF. Affected versions of this package are vulnerable to Arbitrary Code Execution. Remote attackers may be able to inject expression language (EL) expressions and execute arbitrary Java code via the `do` parameter.	[,4.5.4)

Arbitrary Code Execution

org.richfaces:richfaces-a4j is an advanced UI component framework for easily integrating Ajax capabilities into business applications using JSF.

Affected versions of this package are vulnerable to Arbitrary Code Execution. An attacker may be able to inject arbitrary EL variable mapper, thus bypassing the mitigation for CVE-2015-0279

Note: CVE-2018-12532 is a duplicate of CVE-2018-10848.

How to fix Arbitrary Code Execution?

There is no fix for org.richfaces:richfaces-a4j. Richfaces has reached EOL.

[0,)

Arbitrary Code Execution

org.richfaces:richfaces-a4j is an advanced UI component framework for easily integrating Ajax capabilities into business applications using JSF.

Affected versions of this package are vulnerable to Arbitrary Code Execution. Remote attackers may be able to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.

[,4.5.4)

Go back to all versions of this package