-
Type: Bug
-
Status: Resolved
-
Priority: Critical
-
Resolution: Fixed
-
Affects Version/s: NXRF-3.3.1.GA-NX9
-
Fix Version/s: NXRF-3.3.1.GA-NX10
-
Component/s: RichFaces
-
Tags:
JBoss RichFaces has a known flaw related to deserialization:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2165
Details of the patch are here:
http://www.bleathem.ca/blog/2013/07/richfaces-CVE-2013-2165.html
and
http://lists.jboss.org/pipermail/richfaces-svn-commits/2013-June/023102.html
- is required by
-
NXP-13112 Upgrade to Richfaces 3.3.1.GA-NX9.01
- Resolved