YamlProvider Component Code Execution

The vulnerability of the YamlProvider component in the RESTEasy software framework is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

org.jboss.resteasy:resteasy-jaxrs-war (2.3-beta-1) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3-beta-1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3-beta-1 Source cves:...

org.jboss.resteasy:resteasy-jaxrs-war (2.0-beta-3) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.0-beta-3)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.0-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.0-beta-3 Source cves:...

com.redhat.rhevm.api:rhevm-api (0.9-milestone2), com.redhat.rhevm.api:rhevm-api-cli-actions (0.9-milestone2) +16 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.0-rc1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - com.redhat.rhevm.api:rhevm-api 0.9-milestone2 -...

com.redhat.rhevm.api:rhevm-api (>=0.9-milestone8.3, <=1.0-rc1.7), com.redhat.rhevm.api:rhevm-api-common-jaxrs (>=0.9-milestone8.3, <=1.0-rc1.7) +6 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.1.0.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.1.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - com.redhat.rhevm.api:rhevm-api =0.9-milestone8.3, =0.9-milestone8.3,...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.3.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.3.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.3.final Source cves:...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.4.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.4.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.4.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.4.final -...

io.takari:appserver (0.0.7), org.jboss.resteasy:resteasy-jboss-modules (>=3.0-beta-1, <=3.0.24.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.0-beta-1, <=3.0.24.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.0-beta-1, =3.0-beta-1, =3.0.24.final Source cves: CVE-2018-1051 Source advisory: GHSA-M2FV-3RQM-G7P5...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.13), ca.vanzyl.concord:concord-k8s-server (>=0.0.1, <=0.0.10) +16 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.1.0.final, <=3.6.0.cr1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.1.0.final, =0.0.2, =0.0.1, =0.0.8, =1.18.0, =1.38.0, =1.44.0, =1.37.0, =1.44.0, =1.0.0, =1.18.0, =1.0.0, =1.0.0, =0.0.27, =0.0.11, =0.0.27, =0.0.31 and more Source cves: CVE-2018-1051 Source advisory: GHSA-M2FV-3RQM-G7P5...

com.redhat.rhevm.api:rhevm-api (>=0.1-milestone, <=0.9-milestone1), com.redhat.rhevm.api:rhevm-api-cli-actions (0.9-milestone1) +16 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.0-beta-4)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - com.redhat.rhevm.api:rhevm-api =0.1-milestone, =0.1-milestone,...

com.redhat.rhevm.api:rhevm-api (>=0.9-milestone2.1, <=0.9-milestone8.2), com.redhat.rhevm.api:rhevm-api-cli-actions (>=0.9-milestone2.1, <=0.9-milestone6.6) +19 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.0.1.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.0.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - com.redhat.rhevm.api:rhevm-api =0.9-milestone2.1, =0.9-milestone2.1,...

org.jboss.resteasy:resteasy-jaxrs-war (2.2-beta-1) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.2-beta-1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.2-beta-1 Source cves:...

com.redhat.rhevm.api:rhevm-api (>=1.0-rc1.8, <=1.0-rc1.21), com.redhat.rhevm.api:rhevm-api-common-jaxrs (>=1.0-rc1.8, <=1.0-rc1.21) +6 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.2.2.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.2.2.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - com.redhat.rhevm.api:rhevm-api =1.0-rc1.8, =1.0-rc1.8, =1.0-rc1.8,...

org.jboss.resteasy:resteasy-jaxrs-war (2.2.3.ga) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.2.3.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.2.3.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.2.3.ga Source cves: CVE-2018-1051...

org.jboss.resteasy:resteasy-jaxrs-war (2.3-rc1) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3-rc1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3-rc1 Source cves: CVE-2018-1051...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.0.ga) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.0.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.0.ga Source cves: CVE-2018-1051...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.2.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.2.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.2.final Source cves:...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.5.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.5.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.5.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.5.final -...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.6.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.6.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.6.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.6.final -...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.7.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.7.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.7.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.7.final -...