CVE-2026-120971

A flaw was found in RESTEasy's default exception mapper. When an unhandled exception other than a WebApplicationException is not handled by an application exception mapper, RESTEasy returns the exception's localized message in the HTTP 500 response body. A remote unauthenticated attacker who can...

EUVD-2026-115658

A flaw was found in RESTEasy's default exception mapper. When an unhandled exception other than a WebApplicationException is not handled by an application exception mapper, RESTEasy returns the exception's localized message in the HTTP 500 response body. A remote unauthenticated attacker who can...

CVE-2026-120971 Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses

A flaw was found in RESTEasy's default exception mapper. When an unhandled exception other than a WebApplicationException is not handled by an application exception mapper, RESTEasy returns the exception's localized message in the HTTP 500 response body. A remote unauthenticated attacker who can...

CVE-2026-120971

The Org.jboss.resteasy/resteasy-core component is vulnerable to information disclosure due to the default exception mapper. When an unhandled exception (other than a WebApplicationException ) occurs and no application-specific mapper handles it, the system returns the exception's localized messag...

CVE-2026-120971

A flaw was found in RESTEasy's default exception mapper. When an unhandled exception other than a WebApplicationException is not handled by an application exception mapper, RESTEasy returns the exception's localized message in the HTTP 500 response body. A remote unauthenticated attacker who can...

com.aol.microservices:micro-general-exception-mapper (>=0.77, <=0.91.11), com.aol.microservices:micro-grizzly-with-jersey (>=0.62, <=0.91.8) +609 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (3.2.3.release)

org.springframework:spring-core MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.aol.microservices:micro-general-exception-mapper =0.77, =0.62, =0.62, =0.91.3, =0.80,...

com.aol.microservices:micro-general-exception-mapper (>=0.77, <=0.91.11), com.aol.microservices:micro-grizzly-with-jersey (>=0.62, <=0.91.8) +609 more potentially affected by CVE-2018-1257 via org.springframework:spring-core (3.2.3.release)

org.springframework:spring-core MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.aol.microservices:micro-general-exception-mapper =0.77, =0.62, =0.62, =0.91.3, =0.80,...