Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the inconsistent output encoding of user-supplied parameters in HTML responses through the FSUtils.postToTarget function. An attacker can execute arbitrary scripts in the context of the user's browser by...

RESTEasy HttpObjectDecoder Request Smuggling

The vulnerability of the HttpObjectDecoder decoder in the RESTEasy software framework is related to the inconsistent interpretation of HTTP requests during the processing of ASCII-standard encoding symbols. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests HTTP...