{"action":"Upgrade org.richfaces:richfaces to 5.0.0.Alpha3 or later.","affected":[{"introduced":"4.3.4","last_affected":"4.3.5"},{"fixed":"5.0.0.Alpha3","introduced":"5.0.0.Alpha1"}],"component":"org.richfaces:richfaces","cve_ids":["CVE-2014-0086"],"ecosystem":"Maven","epss":0.01451,"exploited":false,"fixed_versions":["5.0.0.Alpha3"],"ghsa_id":"GHSA-xfxv-f945-4qv6","id":"tcs_01M5N9J8NA0S9RRE9A9BM3ZM13","modified_at":"2025-04-13T23:36:03.119019Z","published_at":"2022-05-17T00:13:54Z","references":["https://osv.dev/vulnerability/GHSA-xfxv-f945-4qv6","https://nvd.nist.gov/vuln/detail/CVE-2014-0086","https://github.com/pslegr/core-1/commit/8131f15003f5bec73d475d2b724472e4b87d0757","https://github.com/richfaces/richfaces/commit/807bc411fba070f78c5193cc03d54ab8aa39c36d","https://bugzilla.redhat.com/show_bug.cgi?id=1067268","https://github.com/richfaces/richfaces","https://issues.jboss.org/browse/RF-13250","http://rhn.redhat.com/errata/RHSA-2014-0335.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xfxv-f945-4qv6","url":"https://osv.dev/vulnerability/GHSA-xfxv-f945-4qv6"}],"summary":"JBoss RichFaces Improper Input Validation vulnerability"}