CVE-2013-2165

EPSS 24.1%

Remote code execution due to insecure deserialization

Published: 5/13/2022Modified: 11/8/2023

Description

A flaw was found in the way JBoss RichFaces handled deserialization. A remote attacker could use this flaw to trigger the execution of the deserialization methods in any serializable class deployed on the server. This could lead to a variety of security impacts depending on the deserialization logic of these classes.

Affected packages (1)

References (7)