ID:221 - Exploit for Deserialization of untrusted data in JBoss Richfaces - CVE-2018-14667

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to deserialization of untrusted data. A remote unauthenticated attacker can send a specially crafted UserResource RichFaces expression language that contains a tainted java serialized object org.ajax4jsf.resource.UserResource$UriData expression, trigger deserialization after clearing white list protections and execute arbitrary code with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation