RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack

A cross-site scripting XSS flaw was found in RESTEasy, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack...

CVE-2020-25633

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

DEBIAN-CVE-2020-25633

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

CVE-2020-25633

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

Design/Logic Flaw

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

CVE-2020-25633

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

UBUNTU-CVE-2020-25633

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +1087 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.13.2.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.0.0, =1.3.0 - be.valuya:ovh-sms-client 1.0 - br.com.anteros:anteros-keycloak 1.0.0 and more Source cves: CVE-2020-25633 Source advisory:...

CVE-2020-25633

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

CVE-2020-25633

CVE-2020-25633 – RESTEasy client information disclosure . The issue affects RESTEasy’s client implementation (all versions up to 4.5.6.Final). When a server responds with a WebApplicationException during a RESTEasy client call, an attacker could potentially obtain the server’s sensitive informati...

CVE-2020-25633

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

com.cerner.beadledom:beadledom-client-example-client (>=4.0, <=4.1.2), com.cerner.beadledom:beadledom-client-example-service (>=4.0, <=4.1.2) +217 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client (>=4.0.0.final, <=4.5.6.final)

org.jboss.resteasy:resteasy-client MAVEN version =4.0.0.final, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =1.0.0-alpha1, =1.0.0-alpha1, =0.0.1, =0.0.9 and more Source cves: CVE-2020-25633 Source advisory: MEND:CVE-2020-25633...

com.github.fmcejudo:quarkus-eureka (>=0.0.1, <=0.0.9), com.github.fmcejudo:quarkus-eureka-deployment (>=0.0.1, <=0.0.9) +37 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=4.0.0.final, <=4.5.6.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =4.0.0.final, =0.0.1, =0.0.1, =0.0.1, =1.0.2.final, =1.1.0.final, =1.1.0.final, =1.0.2.final, =1.2.0.final, =0.1.0, =0.0.1, =0.0.1, =1.0.0-rc1, =1.1.0 - io.github.project-openubl:xml-sender-api 1.0.0.beta2 -...

io.hyperfoil.tools:horreum-client (>=0.1, <=0.2), io.thorntail.servers:microprofile (>=2.6.0.final, <=2.7.0.final) +5 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=3.6.0.cr1, <=3.13.2.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =3.6.0.cr1, =0.1, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =3.6.0.cr1, =3.13.2.final Source cves: CVE-2020-25633 Source advisory: MEND:CVE-2020-25633...

CVE-2020-25633

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

CVE-2020-25633

A flaw was found in the RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. This flaw allows client users to obtain the server's potentially sensitive information when the server receives the WebApplicationException from the RESTEasy client call. The highest threat from this...

CVE-2020-25633: Generation of Error Message Containing Sensitive Information

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data...

PT-2020-16141

Name of the Vulnerable Software and Affected Versions RESTEasy versions prior to 4.5.6.Final Description A flaw was found in the RESTEasy client that may allow client users to obtain the server's potentially sensitive information when the server receives a WebApplicationException from the RESTEas...

resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class

A flaw was found in Resteasy, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed...

resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class

A flaw was found in Resteasy, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed...