Search CVE reports
11 – 20 of 24 results
Some fixes available 12 of 28
A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or...
2 affected packages
resteasy, resteasy3.0
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | Vulnerable | Fixed | Fixed | Fixed | Not in release |
| resteasy3.0 | Vulnerable | Fixed | Fixed | Fixed | Fixed |
Some fixes available 12 of 28
A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy...
2 affected packages
resteasy, resteasy3.0
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | Vulnerable | Fixed | Fixed | Fixed | Not in release |
| resteasy3.0 | Vulnerable | Fixed | Fixed | Fixed | Fixed |
Some fixes available 8 of 24
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into...
2 affected packages
resteasy, resteasy3.0
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | Vulnerable | Fixed | Fixed | Fixed | Not in release |
| resteasy3.0 | Not affected | Not affected | Not affected | Fixed | Fixed |
JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with...
1 affected package
resteasy
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | — | Not affected | Not affected | Not affected | Not in release |
It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider.
2 affected packages
resteasy, resteasy3.0
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | — | Not affected | Not affected | Not affected | Not in release |
| resteasy3.0 | — | Not affected | Not affected | Not affected | Not affected |
Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.
2 affected packages
resteasy, resteasy3.0
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | Not affected | Not affected | Not affected | Not affected | Not in release |
| resteasy3.0 | Not affected | Not affected | Not affected | Not affected | Vulnerable |
Some fixes available 1 of 4
SerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to execute arbitrary code.
2 affected packages
resteasy, resteasy3.0
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | — | Not affected | Not affected | Not affected | Not in release |
| resteasy3.0 | — | Not affected | Not affected | Not affected | Not affected |
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7503. Reason: This candidate is a reservation duplicate of CVE-2017-7503. Notes: All CVE users should reference CVE-2017-7503 instead of this candidate. All...
1 affected package
resteasy
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | — | — | — | — | — |
Some fixes available 1 of 12
Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
2 affected packages
resteasy, resteasy3.0
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | — | Not affected | Not affected | Not affected | Not in release |
| resteasy3.0 | — | Not affected | Not affected | Not affected | Not affected |
Some fixes available 1 of 12
JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack.
2 affected packages
resteasy, resteasy3.0
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | — | Not affected | Not affected | Not affected | Not in release |
| resteasy3.0 | — | Not affected | Not affected | Not affected | Not affected |