com.github.fmcejudo:quarkus-eureka (>=0.0.1, <=0.0.9), com.github.fmcejudo:quarkus-eureka-deployment (>=0.0.1, <=0.0.9) +37 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=4.0.0.final, <=4.5.6.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =4.0.0.final, =0.0.1, =0.0.1, =0.0.1, =1.0.2.final, =1.1.0.final, =1.1.0.final, =1.0.2.final, =1.2.0.final, =0.1.0, =0.0.1, =0.0.1, =1.0.0-rc1, =1.1.0 - io.github.project-openubl:xml-sender-api 1.0.0.beta2 -...

GHSA-HR32-MGPM-QF2F Generation of Error Message Containing Sensitive Information in RESTEasy client

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

com.github.fmcejudo:quarkus-eureka (>=0.0.1, <=0.0.9), com.github.fmcejudo:quarkus-eureka-deployment (>=0.0.1, <=0.0.9) +37 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=4.0.0.final, <=4.5.6.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =4.0.0.final, =0.0.1, =0.0.1, =0.0.1, =1.0.2.final, =1.1.0.final, =1.1.0.final, =1.0.2.final, =1.2.0.final, =0.1.0, =0.0.1, =0.0.1, =1.0.0-rc1, =1.1.0 - io.github.project-openubl:xml-sender-api 1.0.0.beta2 -...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +1087 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.13.2.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.0.0, =1.3.0 - be.valuya:ovh-sms-client 1.0 - br.com.anteros:anteros-keycloak 1.0.0 and more Source cves: CVE-2020-25633 Source advisory:...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +1087 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.13.2.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.0.0, =1.3.0 - be.valuya:ovh-sms-client 1.0 - br.com.anteros:anteros-keycloak 1.0.0 and more Source cves: CVE-2020-25633 Source advisory:...

Generation of Error Message Containing Sensitive Information in RESTEasy client

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

io.hyperfoil.tools:horreum-client (>=0.1, <=0.2), io.thorntail.servers:microprofile (>=2.6.0.final, <=2.7.0.final) +5 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=3.6.0.cr1, <=3.13.2.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =3.6.0.cr1, =0.1, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =3.6.0.cr1, =3.13.2.final Source cves: CVE-2020-25633 Source advisory: GHSA-HR32-MGPM-QF2F...

com.cerner.beadledom:beadledom-client-example-client (>=4.0, <=4.1.2), com.cerner.beadledom:beadledom-client-example-service (>=4.0, <=4.1.2) +217 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client (>=4.0.0.final, <=4.5.6.final)

org.jboss.resteasy:resteasy-client MAVEN version =4.0.0.final, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =1.0.0-alpha1, =1.0.0-alpha1, =0.0.1, =0.0.9 and more Source cves: CVE-2020-25633 Source advisory: OSV:GHSA-HR32-MGPM-QF2F...

io.hyperfoil.tools:horreum-client (>=0.1, <=0.2), io.thorntail.servers:microprofile (>=2.6.0.final, <=2.7.0.final) +5 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=3.6.0.cr1, <=3.13.2.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =3.6.0.cr1, =0.1, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =3.6.0.cr1, =3.13.2.final Source cves: CVE-2020-25633 Source advisory: OSV:GHSA-HR32-MGPM-QF2F...

CVE-2020-14326

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service...

CVE-2020-14326

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service...

CVE-2020-14326

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service...

UBUNTU-CVE-2020-14326

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service...

Design/Logic Flaw

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service...

CVE-2020-14326

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service...

CVE-2020-14326

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service...

CVE-2020-14326

CVE-2020-14326 affects RESTEasy: RootNode caching of routes can trigger hash flooding, causing slower requests and higher CPU usage leading to DoS. The description confirms the vulnerability and impact but does not specify affected versions, vulnerable component details beyond RootNode routing ca...

CVE-2020-14326

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service...

PT-2021-9713

Name of the Vulnerable Software and Affected Versions RESTEasy affected versions not specified Description A flaw in RESTEasy's RootNode allows incorrect caching of routes, resulting in hash flooding. This leads to slower requests and increased CPU time spent on searching and adding entries,...

CVE-2020-14326: Uncontrolled Resource Consumption

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service...