Primetek Primefaces Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 10/01/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| org.primefaces:primefaces | ≥ 5.0, < 6.0 | 6.0 |
| primefaces | ≥ 4.0, ≤ 4.0.24≥ 5.0, < 5.2.21≥ 5.3, < 5.3.8 | 5.2.215.3.8 |
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free