com.github.adrmal:peka-vm-client (1.0.0), com.github.fmcejudo:quarkus-eureka (>=0.0.1, <=0.0.5) +327 more potentially affected by CVE-2020-10688 via org.jboss.resteasy:resteasy-core (>=4.0.0.final, <=4.5.2.final)

org.jboss.resteasy:resteasy-core MAVEN version =4.0.0.final, =0.0.1, =0.0.1, =0.0.1, =5.6.0-cr-1, =5.3.0-cr-1, =5.3.0-cr-1, =5.3.0-cr-1, =5.3.0-cr-1, =5.3.0-cr-1, =5.3.0-cr-1, =5.3.0-cr-1, =5.3.0-cr-1, =5.3.0 and more Source cves: CVE-2020-10688 Source advisory: OSV:GHSA-29QJ-RVV6-QRMV...

Cross-site scripting in RESTEasy

A cross-site scripting XSS flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack...

br.com.labbs:quarkus-monitor (>=0.1.5, <=0.3.0), br.com.labbs:quarkus-monitor-deployment (>=0.1.5, <=0.3.0) +1091 more potentially affected by CVE-2021-20293 via org.jboss.resteasy:resteasy-core (>=4.0.0.beta6, <=4.6.0.final)

org.jboss.resteasy:resteasy-core MAVEN version =4.0.0.beta6, =0.1.5, =0.1.5, =1.8.0, =1.5.0-alpha2, =1.5.0-alpha2, =1.6.1, =1.5.0-alpha3, =1.5.0-alpha3, =1.5.0-alpha3, =1.5.0-alpha3, =4.0, =4.0, =4.0, =4.0, =4.1.2 and more Source cves: CVE-2021-20293https:...

GHSA-5H26-C766-G93V Cross-Site Scripting

A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The...

Cross-Site Scripting

A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The...

br.com.labbs:quarkus-monitor (>=0.1.5, <=0.3.0), br.com.labbs:quarkus-monitor-deployment (>=0.1.5, <=0.3.0) +1091 more potentially affected by CVE-2021-20293 via org.jboss.resteasy:resteasy-core (>=4.0.0.beta6, <=4.6.0.final)

org.jboss.resteasy:resteasy-core MAVEN version =4.0.0.beta6, =0.1.5, =0.1.5, =1.8.0, =1.5.0-alpha2, =1.5.0-alpha2, =1.6.1, =1.5.0-alpha3, =1.5.0-alpha3, =1.5.0-alpha3, =1.5.0-alpha3, =4.0, =4.0, =4.0, =4.0, =4.1.2 and more Source cves: CVE-2021-20293https:...

CVE-2021-20293

A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The...

CVE-2021-20293

A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The...

CVE-2021-20293

A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The...

Cross site scripting

A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The...

CVE-2021-20293

A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The...

CVE-2021-20293

Removed by vendor...

CVE-2021-20293

A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The...

CVE-2021-20293

CVE-2021-20293 affects RESTEasy (all versions up to 4.6.0.Final). The flaw is a reflected XSS caused by improper handling of URL encoding when using @javax.ws.rs.PathParam without an accompanying @Produces MediaType. Exploitation could lead to script execution in a victim’s browser, impacting dat...

CVE-2021-20293

A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The...

PT-2021-13879

Name of the Vulnerable Software and Affected Versions: RESTEasy versions up to 4.6.0.Final Description: A reflected Cross-Site Scripting XSS flaw was found in RESTEasy, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw...

CVE-2021-20293: Improper Neutralization of Input During Web Page Generation

A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The...

GHSA-9699-GM7F-CMJV Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected...

Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected...

com.cerner.beadledom:beadledom-client-example-client (>=4.0, <=4.1.2), com.cerner.beadledom:beadledom-client-example-service (>=4.0, <=4.1.2) +217 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client (>=4.0.0.final, <=4.5.6.final)

org.jboss.resteasy:resteasy-client MAVEN version =4.0.0.final, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =1.0.0-alpha1, =1.0.0-alpha1, =0.0.1, =0.0.9 and more Source cves: CVE-2020-25633 Source advisory: GHSA-HR32-MGPM-QF2F...