title: Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 security update
description: RichFaces: Expression Language injection via UserResource allows for unauthenticated remote code execution
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:5