CVE-2010-1871
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
- Affected products
- Red Hat Jboss Enterprise Application Platform, Jboss Seam 2
- Redhat Jboss Enterprise Application Platform
- = 4.3.0
- Fix
- Available
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 83.4% (100th percentile)
- Weakness
- CWE-917
- NVD status
- Analyzed
- Published
- 2010-08-04
CVE-2010-1871 at NVD
8 known exploits for CVE-2010-1871
Proof-of-concept code and exploit modules indexed by Sploitus
Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform
JBoss Seam 2 Remote Command Execution
JBoss Seam 2 - Arbitrary File Upload / Execution (Metasploit)
JBoss Seam 2 File Upload / Remote Code Execute Exploit
JBoss Seam 2 File Upload / Execute
JBoss Seam 2 File Upload and Execute
JBoss Seam参数化EL表达式远程代码执行漏洞
JBoss Seam 2 Remote Command Execution