Description

JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.

Remediation

References

CVE-2010-1871

Related Vulnerabilities

Oracle JRE CVE-2013-5846 Vulnerability (CVE-2013-5846)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-15005)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Arbitrary File Upload (2.0.21)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3586)

WordPress Plugin GD bbPress Attachments Cross-Site Scripting (2.5)

Severity

Medium

Classification

CVE-2010-1871 CWE-20

Tags

Missing Update Known Vulnerabilities