org.jboss.resteasy:resteasy-atom-provider (1.1.ga), org.jboss.resteasy:resteasy-multipart-provider (1.1.ga) +1 more potentially affected by CVE-2011-5245 via org.jboss.resteasy:resteasy-jaxb-provider (1.1.ga)

org.jboss.resteasy:resteasy-jaxb-provider MAVEN version 1.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxb-provider and may be impacted: - org.jboss.resteasy:resteasy-atom-provider 1.1.ga -...

org.jboss.resteasy:resteasy-atom-provider (1.2.rc1), org.jboss.resteasy:resteasy-fastinfoset-provider (1.2.rc1) +2 more potentially affected by CVE-2011-5245 via org.jboss.resteasy:resteasy-jaxb-provider (1.2.rc1)

org.jboss.resteasy:resteasy-jaxb-provider MAVEN version 1.2.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxb-provider and may be impacted: - org.jboss.resteasy:resteasy-atom-provider 1.2.rc1 -...

GHSA-G4JG-GPWV-P7WV Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy

The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding JAXB input, aka an XML external entity XXE injection attack, a similar vulnerability to...

Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy

RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity XXE injection attack...

GHSA-WRRH-G7H3-GQMX Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy

RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity XXE injection attack...

JBoss RESTEasy vulnerable to Improper Input Validation

JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions...

GHSA-HGJR-XWJ3-JFVW JBoss RESTEasy vulnerable to Improper Input Validation

JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions...

br.com.esec.icpm:certillion-client-library-resteasy-plugin (1.1.9), com.codereligion:bugsnag-logback (>=1.0.0, <=1.1.0) +119 more potentially affected by CVE-2014-3490 via org.jboss.resteasy:resteasy-client (>=3.0.0.final, <=3.0.8.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0.0.final, =1.0.0, =6.0.0, =6.0.0, =7.5.0, =6.0.0, =6.0.0, =6.0.0, =7.5.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2014-3490 Source advisory: OSV:GHSA-QJPQ-5PQ3-43RR...

GHSA-QJPQ-5PQ3-43RR Incorrect Privilege Assignment in RESTEasy

RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform EAP 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and hav...

Incorrect Privilege Assignment in RESTEasy

RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform EAP 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and hav...

br.com.esec.icpm:certillion-client-library-resteasy-plugin (1.1.9), com.codereligion:bugsnag-logback (>=1.0.0, <=1.1.0) +119 more potentially affected by CVE-2014-3490 via org.jboss.resteasy:resteasy-client (>=3.0.0.final, <=3.0.8.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0.0.final, =1.0.0, =6.0.0, =6.0.0, =7.5.0, =6.0.0, =6.0.0, =6.0.0, =7.5.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2014-3490 Source advisory: GHSA-QJPQ-5PQ3-43RR...

org.jboss.resteasy:async-http-servlet-3.0 (2.3-rc1), org.jboss.resteasy:examples-jsapi (2.3-rc1) +17 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.3-rc1)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:async-http-servlet-3.0 2.3-rc1 - org.jboss.resteasy:examples-jsapi 2.3-r...

org.jboss.resteasy:abdera-atom-provider (2.0-beta-1), org.jboss.resteasy:async-http-servlet-3.0 (2.0-beta-1) +9 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.0-beta-1)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:abdera-atom-provider 2.0-beta-1 -...

org.jboss.resteasy:abdera-atom-provider (1.1.ga), org.jboss.resteasy:async-http-servlet-3.0 (1.1.ga) +6 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (1.1.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 1.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:abdera-atom-provider 1.1.ga - org.jboss.resteasy:async-http-servlet-3.0...

com.redhat.rhevm.api:rhevm-api (>=0.1-milestone, <=0.9-milestone1), com.redhat.rhevm.api:rhevm-api-cli-actions (0.9-milestone1) +30 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.0-beta-4)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.redhat.rhevm.api:rhevm-api =0.1-milestone, =0.1-milestone, =0.1-milestone,...

com.redhat.rhevm.api:rhevm-api (0.9-milestone2), com.redhat.rhevm.api:rhevm-api-cli-actions (0.9-milestone2) +29 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.0-rc1)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.redhat.rhevm.api:rhevm-api 0.9-milestone2 - com.redhat.rhevm.api:rhevm-api-cli-actions...

org.jboss.resteasy:abdera-atom-provider (2.0-beta-2), org.jboss.resteasy:async-http-servlet-3.0 (2.0-beta-2) +12 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.0-beta-2)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:abdera-atom-provider 2.0-beta-2 -...

com.telapi.api:telapi-java (0.0.1), net.sf.jaceko:soaprest-mock-service (1.0.0) +31 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.3.4.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.telapi.api:telapi-java 0.0.1 - net.sf.jaceko:soaprest-mock-service 1.0.0 -...

com.woorea:resteasy-connector (>=3.0.0, <=3.2.7), org.chtijbug.drools:drools-framework-rest-guvnor (>=drools-framework-parent-1.5.3, <=1.5.2) +28 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.3.2.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.woorea:resteasy-connector =3.0.0, =drools-framework-parent-1.5.3,...

biz.paluch.visualizr:visualizr (1.0), com.iorga:iraj (>=1.1.0, <=1.1.1) +128 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.3.6.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - biz.paluch.visualizr:visualizr 1.0 - com.iorga:iraj =1.1.0, =1.3.0, =1.3.0, =1.3.0,...