CVE-2018-12533

9.8 criticalEPSS 19%

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-917
Published: 2018-06-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:richfaces

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-4j38-wjhf-884r	Maven	org.richfaces:richfaces-core	>=3.1.0 <=3.3.4	no fix published

References

http://seclists.org/fulldisclosure/2020/Mar/21
http://www.securityfocus.com/bid/104502
http://www.securitytracker.com/id/1041617
https://access.redhat.com/errata/RHSA-2018:2663
https://access.redhat.com/errata/RHSA-2018:2664

Check your stack JSON