https://www.systemtek.co.uk/2018/10/red-hat-jboss-richfaces-expression-language-injection-arbitrary-java-code-execution-vulnerability-cve-2018-12533/