Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 10/12/2021. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| jboss enterprise application platform | = 4.3.0 |
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free