Поиск уязвимостей
Количество 5
Количество 5
CVE-2014-3490
RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818.
CVE-2014-3490
RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818.
GHSA-qjpq-5pq3-43rr
Incorrect Privilege Assignment in RESTEasy
ELSA-2014-1011
ELSA-2014-1011: resteasy-base security update (MODERATE)
ALT-PU-2017-2491
ALT-PU-2017-2491: package `resteasy` update to version 3.0.19-alt1_5jpp8
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-3490 RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818. | CVSS2: 5 | 5% Низкий | больше 12 лет назад |
 | CVE-2014-3490 RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818. | CVSS2: 7.5 | 5% Низкий | около 12 лет назад |
| GHSA-qjpq-5pq3-43rr Incorrect Privilege Assignment in RESTEasy | 5% Низкий | больше 4 лет назад | |
| ELSA-2014-1011 ELSA-2014-1011: resteasy-base security update (MODERATE) | 5% Низкий | больше 12 лет назад | |
| ALT-PU-2017-2491 ALT-PU-2017-2491: package `resteasy` update to version 3.0.19-alt1_5jpp8 | CVSS2: 7.5 | 5% Низкий | около 9 лет назад |
Уязвимостей на страницу