CVE-2016-6347

Опубликовано: 20 апр. 2017

Источник: debian

Описание

Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
resteasy	fixed	3.1.0-1		package
resteasy	no-dsa		jessie	package
resteasy3.0	fixed	3.0.26-1		package

Примечания

https://bugzilla.redhat.com/show_bug.cgi?id=1372124

Связанные уязвимости

CVE-2016-6347

CVSS3: 6.1

ubuntu

больше 9 лет назад

Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2016-6347

CVSS3: 5.4

redhat

почти 10 лет назад

Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2016-6347

CVSS3: 6.1

nvd

больше 9 лет назад

Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

GHSA-r346-rmrg-qpgh

CVSS3: 6.1

github

больше 4 лет назад

Improper Neutralization of Input During Web Page Generation in RESTEasy