Lucene search

K
redhatcveRedhat.comRH:CVE-2016-6348
HistorySep 01, 2016 - 1:48 a.m.

CVE-2016-6348

2016-09-0101:48:30
redhat.com
access.redhat.com
13

0.001 Low

EPSS

Percentile

48.5%

It was found that in some configurations the JacksonJsonpInterceptor is activated by default in RESTEasy. An attacker could use this flaw to launch a Cross Site Scripting Inclusion attack.

0.001 Low

EPSS

Percentile

48.5%