Lucene search
K

6 matches found

OSV
OSV
added 2021/05/27 7:15 p.m.3 views

DEBIAN-CVE-2020-10688

A cross-site scripting XSS flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack...

6.1CVSS6.4AI score0.00344EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2020/09/23 4:27 p.m.167 views

Important: Red Hat Security Advisory: Red Hat support for Spring Boot 2.2.6.SP2 security update

An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.5CVSS6.6AI score0.92155EPSS
Exploits2References7
RedHat Linux
RedHat Linux
added 2020/07/23 7:3 a.m.0 views

RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack

A cross-site scripting XSS flaw was found in RESTEasy, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack...

6.1CVSS5.6AI score0.00344EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2020/06/11 9:3 a.m.0 views

RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack

A cross-site scripting XSS flaw was found in RESTEasy, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack...

6.1CVSS5.6AI score0.00344EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2020/05/28 3:58 p.m.1 views

RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack

A cross-site scripting XSS flaw was found in RESTEasy, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack...

6.1CVSS5.6AI score0.00344EPSS
Exploits1References6
Veracode
Veracode
added 2020/03/25 4:19 a.m.29 views

Cross-site Scripting (XSS)

resteasy-jaxrs is vulnerable to cross-site scripting XSS. The vulnerability exists due to the lack of sanitization of the value of strVal, allowing RESTEASY003870 exceptions be used to execute arbitrary Javascript in a user's browser...

6.1CVSS1.9AI score0.00344EPSS
Exploits1References6Affected Software57
Rows per page
Query Builder