Homepage
About Snyk

org.richfaces:richfaces-a4j@4.5.14.Final vulnerabilities

  • latest version

    4.5.17.Final

  • first published

    10 years ago

  • latest version published

    8 years ago

  • licenses detected

  • package manager

    View on Maven Repository
Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.richfaces:richfaces-a4j package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Arbitrary Code Execution

org.richfaces:richfaces-a4j is an advanced UI component framework for easily integrating Ajax capabilities into business applications using JSF.

Affected versions of this package are vulnerable to Arbitrary Code Execution. An attacker may be able to inject arbitrary EL variable mapper, thus bypassing the mitigation for CVE-2015-0279

Note: CVE-2018-12532 is a duplicate of CVE-2018-10848.

How to fix Arbitrary Code Execution?

There is no fix for org.richfaces:richfaces-a4j. Richfaces has reached EOL.

[0,)
Go back to all versions of this package