ZeroDay Findings
Sign inSign up

Findings

CVE-2018-14667

Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

Published Nov 6, 2018 · updated Jun 16, 2026 · redhat richfaces

Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 6, 2018 · Catalog

    Detected

    Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.

  2. Sep 28, 2023 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Oct 19, 2023 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Oct 19, 2023

Affected

  • cpe redhat/enterprise linux5.0
  • cpe redhat/enterprise linux6.0
  • cpe redhat/richfacesversion unspecified
  • vendor Red Hat JBoss RichFaces Frameworkversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2018-14667

    Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2018-14667

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2018-14667

    30-day exploitation probability 74.2%

    first.org
  • NIST NVDVulnerability recordCVE-2018-14667

    The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserReso

    nvd.nist.gov

References