Lucene search
GoogleOSV:GHSA-63CQ-PPQ8-CW6GHistoryMay 24, 2022 - 10:01 p.m.
Improper Input Validation in RESTEasy
2022-05-2422:01:21
Google
osv.dev
18
improper validation
resteasy
injection
illegal header
unexpected behavior
http response
EPSS
0.001
Percentile
44.4%
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server’s response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1695
github.com/resteasy/Resteasy/commit/88ba8537f2e8d465c7031d352bf9bb25526ce475
lists.fedoraproject.org/archives/list/[email protected]/message/IJDMT443YZWCBS5NS76XZ7TL3GK7BXHL
lists.fedoraproject.org/archives/list/[email protected]/message/RX22C6I56BJUER76IIPYHGZIWBQIU3CQ
nvd.nist.gov/vuln/detail/CVE-2020-1695
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0039)
2022-01-28 00:00:00
Fedora: Security Advisory for resteasy (FEDORA-2020-239503f5fa)
2020-12-09 00:00:00
Fedora: Security Advisory for resteasy (FEDORA-2020-df970da9fc)
2020-12-09 00:00:00
nessus
nessus
CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2021:1775)
2021-05-19 00:00:00
Oracle Linux 8 : pki-core:10.6 / and / pki-deps:10.6 (ELSA-2021-1775)
2021-11-12 00:00:00
RHEL 7 : candlepin (Unpatched Vulnerability)
2024-06-03 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: resteasy-3.0.26-6.fc33
2020-12-09 01:17:06
[SECURITY] Fedora 32 Update: resteasy-3.0.26-6.fc32
2020-12-09 01:23:21
prion
prion
Input validation
2020-05-19 15:15:00
cvelist
cvelist
CVE-2020-1695
2020-05-19 14:13:10
redhatcve
redhatcve
CVE-2020-1695
2020-04-15 05:59:57
osv
osv
Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2021-05-18 06:04:17
CVE-2020-1695
2020-05-19 15:15:11
debiancve
debiancve
CVE-2020-1695
2020-05-19 15:15:11
cve
cve
CVE-2020-1695
2020-05-19 15:15:11
almalinux
almalinux
redhat
redhat
nvd
nvd
CVE-2020-1695
2020-05-19 15:15:11
veracode
veracode
Improper Input Validation
2020-05-27 06:30:55
rocky
rocky
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2021-05-18 06:04:17
ubuntucve
ubuntucve
CVE-2020-1695
2020-05-19 00:00:00
mageia
mageia
Updated resteasy packages fix a security vulnerability
2021-01-17 19:07:01
github
github
Improper Input Validation in RESTEasy
2022-05-24 22:01:21
oraclelinux
oraclelinux
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2021-05-25 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2375
2024-03-19 12:36:24