Later archive addition
Poor RichFaces
Code White analyzes RichFaces resource handling and finds new ways around mitigations for earlier deserialization and expression-language vulnerabilities. Crafted resource data reaches dangerous decoding and evaluation paths, restoring remote code execution across supported RichFaces 3.x and 4.x releases.
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.