CVE-2016-6347

Опубликовано: 20 апр. 2017

Источник: debian

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
resteasy	fixed	3.1.0-1		package
resteasy	no-dsa		jessie	package
resteasy3.0	fixed	3.0.26-1		package

Примечания

https://bugzilla.redhat.com/show_bug.cgi?id=1372124

EPSS

Процентиль: 26%

0.00093

Низкий

Связанные уязвимости

CVE-2016-6347

CVSS3: 6.1

ubuntu

почти 9 лет назад

Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2016-6347

CVSS3: 5.4

redhat

больше 9 лет назад

Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2016-6347

CVSS3: 6.1

nvd

почти 9 лет назад

Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

GHSA-r346-rmrg-qpgh

CVSS3: 6.1

github

больше 3 лет назад

Improper Neutralization of Input During Web Page Generation in RESTEasy

EPSS

Процентиль: 26%

0.00093

Низкий