CVE-2018-12533
CRITICALJBoss RichFaces 3.1.0-3.3.4 - Unauthenticated Expression Language Injection via Paint2DResource ImageData Path
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2018-12533. PoCs published by llamaonsecurity, LucasKatashi, Pastea.
AI-analyzed exploit summary This repository contains a working proof-of-concept exploit for CVE-2018-12533, which targets a deserialization vulnerability in RichFaces 3.3.4. The exploit generates a malicious URL that, when accessed, executes arbitrary code via EL injection, creating a file in /tmp as a demonstration.
Description
JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.
Exploits (5)
This repository contains a working proof-of-concept exploit for CVE-2018-12533, which targets a deserialization vulnerability in RichFaces 3.3.4. The exploit generates a malicious URL that, when accessed, executes arbitrary code via EL injection, creating a file in /tmp as a demonstration.
This repository contains a functional exploit for CVE-2018-12533, a deserialization vulnerability in RichFaces. The exploit generates a malicious JAR payload to achieve remote code execution (RCE) on vulnerable RichFaces applications.
This PoC exploits a deserialization vulnerability in RichFaces (CVE-2018-12533) by crafting a malicious serialized object that executes arbitrary EL expressions when deserialized. The exploit generates a base64-encoded payload for use in attacks against vulnerable applications.
This repository contains a functional proof-of-concept exploit for CVE-2018-12533, a deserialization vulnerability in RichFaces. The exploit generates a malicious serialized object that, when deserialized, executes arbitrary commands via a JavaScript engine.
This repository contains a functional exploit for CVE-2018-12533, a deserialization vulnerability in RichFaces 3.3.4. The exploit generates a malicious payload that, when processed by a vulnerable JBoss server, executes arbitrary commands via EL injection.
References (7)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H