{"cvss":0.0,"datePublished":"2023-09-28","dateUpdated":"2023-09-28","description":"Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.","dueDate":"2023-10-19","id":"CVE-2018-14667","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667; https://nvd.nist.gov/vuln/detail/CVE-2018-14667","product":"JBoss RichFaces Framework","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability","vendor":"Red Hat"}