Linux Distros Unpatched Vulnerability : CVE-2016-6348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion XSSI attack. CVE-2016-6348 Note that Nessus relies on...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +417 more potentially affected by CVE-2016-6348 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.0.19.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.1.11, =1.3.2 and more Source cves: CVE-2016-6348 Source advisory: OSV:GHSA-9XFC-J5MF-9W5P...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +417 more potentially affected by CVE-2016-6348 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.0.19.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.1.11, =1.3.2 and more Source cves: CVE-2016-6348 Source advisory: GHSA-9XFC-J5MF-9W5P...

CVE-2016-6348

JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion XSSI attack...

CVE-2016-6348

JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion XSSI attack...

DEBIAN-CVE-2016-6348

JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion XSSI attack...

CVE-2016-6348

JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion XSSI attack...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +417 more potentially affected by CVE-2016-6348 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.0.19.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.1.11, =1.3.2 and more Source cves: CVE-2016-6348 Source advisory: MEND:CVE-2016-6348...

CVE-2016-6348

CVE-2016-6348 is reported in RESTEasy via the JacksonJsonpInterceptor and is described in connected advisories as enabling a cross-site script inclusion (XSSI) vulnerability. The Ubuntu USN and Tenable/NASL entries enumerate RESTEasy-related CVEs together and explicitly list CVE-2016-6348 among a...

CVE-2016-6348

JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion XSSI attack...

CVE-2016-6348

It was found that in some configurations the JacksonJsonpInterceptor is activated by default in RESTEasy. An attacker could use this flaw to launch a Cross Site Scripting Inclusion attack...