参考:https://xz.aliyun.com/t/3264 https://landgrey.me/richfaces-cve-2018-14667/ 来源:https://seclists.org/fulldisclosure/2018/Nov/47 Demo: https://www.youtube.com/watch?v=HR7-nL5G91w