Richfaces version 3.x suffers from a remote code execution vulnerability.
5dfbb32d43674a8fbcf00a8b17109c6edc2aa21bc7c6922d64c36ba5c89fcce7
JexBoss is an exploitation tool that demonstrates deserialization remote code execution attacks against multiple applications and platforms.
aeb7832bfac3aaa324b3d6950c3ff7b7b82470cbcb90aeff584aa5ef011c82f5