1769 matches found
Resteasy: Yaml unmarshalling vulnerable to RCE
It was discovered that under certain conditions RESTEasy could be forced to parse a request with YamlProvider, resulting in unmarshalling of potentially untrusted data. An attacker could possibly use this flaw execute arbitrary code with the permissions of the application using RESTEasy...
Resteasy: Yaml unmarshalling vulnerable to RCE
It was discovered that under certain conditions RESTEasy could be forced to parse a request with YamlProvider, resulting in unmarshalling of potentially untrusted data. An attacker could possibly use this flaw execute arbitrary code with the permissions of the application using RESTEasy...
Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.15 update on RHEL 6
An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
EulerOS 2.0 SP1 : resteasy-base (EulerOS-SA-2016-1057)
According to the version of the resteasy-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered that under certain conditions RESTEasy could be forced to parse a request with SerializableProvider, resulting in...
CVE-2016-6347
Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
DEBIAN-CVE-2016-6347
Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-6347
Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
UBUNTU-CVE-2016-6347
Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-6347
Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-6347
Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +417 more potentially affected by CVE-2016-6347 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.0.19.final)
org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.1.11, =1.3.2 and more Source cves: CVE-2016-6347 Source advisory: MEND:CVE-2016-6347...
org.infinispan:infinispan-distribution (9.0.0.beta1), org.infinispan:infinispan-javadoc-all (9.0.0.beta1) +26 more potentially affected by CVE-2016-6347 via org.jboss.resteasy:resteasy-client (>=3.1.0.beta1, <=3.1.0.beta2)
org.jboss.resteasy:resteasy-client MAVEN version =3.1.0.beta1, =5.3.4.final, =5.3.4.final, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta2 and more Source cves: CVE-2016-6347 Source advisory: MEND:CVE-2016-6347...
CVE-2016-6347
CVE-2016-6347 is a RESTEasy vulnerability described as a cross-site scripting (XSS) issue in the default exception handler. The available sources identify the affected component as RESTEasy, with the underlying cause being improper handling in the default exception handler that permits remote att...
CVE-2016-6347
Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-6347
Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-6347: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2017-8971
Name of the Vulnerable Software and Affected Versions RESTEasy affected versions not specified Description A cross-site scripting XSS issue exists in the default exception handler of RESTEasy, allowing remote attackers to inject arbitrary web script or HTML. Recommendations At the moment, there i...
CVE-2016-6348
JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion XSSI attack...
