org.jboss.resteasy:async-http-servlet-3.0 (2.3.0.ga), org.jboss.resteasy:examples-jsapi (2.3.0.ga) +16 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.3.0.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:async-http-servlet-3.0 2.3.0.ga - org.jboss.resteasy:examples-jsapi...

org.chtijbug.drools:guvnor-jaxb-entities (5.6.2.chtijbug), org.drools:guvnor-jaxb-entities (>=5.6.0.cr1, <=5.6.0.final) +18 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.2.3.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.2.3.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.chtijbug.drools:guvnor-jaxb-entities 5.6.2.chtijbug - org.drools:guvnor-jaxb-entities...

org.jboss.resteasy:abdera-atom-provider (1.1.ga), org.jboss.resteasy:async-http-servlet-3.0 (1.1.ga) +6 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (1.1.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 1.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:abdera-atom-provider 1.1.ga - org.jboss.resteasy:async-http-servlet-3.0...

com.logiclander.jaasmine:jaasmine-web (1.0.0), net.ju-n.bonita.connectors:bonita-qrcode-connector (0.2) +16 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (1.2.1.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 1.2.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.logiclander.jaasmine:jaasmine-web 1.0.0 -...

GHSA-JMVV-524F-HJ5J Improper Handling of Exceptional Conditions in Apache Tomcat

The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is presented to the error page with the origin...

Improper Handling of Exceptional Conditions in Apache Tomcat

The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is presented to the error page with the origin...

GHSA-V646-RX6W-R3QQ Improper Access Control in Apache Tomcat

Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an...

Improper Access Control in Apache Tomcat

Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an...

io.undertow:undertow-servlet (1.0.0.alpha7), io.undertow:undertow-websockets-jsr (1.0.0.alpha7) potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.0.0.alpha7)

io.undertow:undertow-core MAVEN version 1.0.0.alpha7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha7 - io.undertow:undertow-websockets-jsr 1.0.0.alpha7 Source...

io.undertow:undertow-servlet (1.0.0.cr4), io.undertow:undertow-websockets-jsr (1.0.0.cr4) potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.0.0.cr4)

io.undertow:undertow-core MAVEN version 1.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr4 - io.undertow:undertow-websockets-jsr 1.0.0.cr4 Source cves:...

io.undertow:undertow-servlet (1.4.1.final), io.undertow:undertow-websockets-jsr (1.4.1.final) potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.4.1.final)

io.undertow:undertow-core MAVEN version 1.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.1.final - io.undertow:undertow-websockets-jsr 1.4.1.final Source cves:...

io.undertow:undertow-servlet (1.0.0.beta29), io.undertow:undertow-websockets-jsr (1.0.0.beta29) potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.0.0.beta29)

io.undertow:undertow-core MAVEN version 1.0.0.beta29 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta29 - io.undertow:undertow-websockets-jsr 1.0.0.beta29 Source...

io.undertow:undertow-http2-test-suite (1.3.0.beta7), io.undertow:undertow-servlet (1.3.0.beta7) +1 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.0.beta7)

io.undertow:undertow-core MAVEN version 1.3.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta7 - io.undertow:undertow-servlet 1.3.0.beta7 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta13), io.undertow:undertow-servlet (1.3.0.beta13) +20 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.0.beta13)

io.undertow:undertow-core MAVEN version 1.3.0.beta13 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta13 - io.undertow:undertow-servlet 1.3.0.beta13 -...

io.undertow:undertow-servlet (1.0.18.final), io.undertow:undertow-websockets-jsr (1.0.18.final) potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.0.18.final)

io.undertow:undertow-core MAVEN version 1.0.18.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.18.final - io.undertow:undertow-websockets-jsr 1.0.18.final Source...

io.undertow:undertow-servlet (1.0.4.final), io.undertow:undertow-websockets-jsr (1.0.4.final) potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.0.4.final)

io.undertow:undertow-core MAVEN version 1.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.4.final - io.undertow:undertow-websockets-jsr 1.0.4.final Source cves:...

io.undertow:undertow-servlet (1.0.0.alpha11), io.undertow:undertow-websockets-jsr (1.0.0.alpha11) potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.0.0.alpha11)

io.undertow:undertow-core MAVEN version 1.0.0.alpha11 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha11 - io.undertow:undertow-websockets-jsr 1.0.0.alpha11 Source...

io.undertow:undertow-servlet (1.0.0.beta28), io.undertow:undertow-websockets-jsr (1.0.0.beta28) potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.0.0.beta28)

io.undertow:undertow-core MAVEN version 1.0.0.beta28 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta28 - io.undertow:undertow-websockets-jsr 1.0.0.beta28 Source...

io.undertow:undertow-servlet (1.1.0.beta6), io.undertow:undertow-websockets-jsr (1.1.0.beta6) +1 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.1.0.beta6)

io.undertow:undertow-core MAVEN version 1.1.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta6 - io.undertow:undertow-websockets-jsr 1.1.0.beta6 -...

io.undertow:undertow-servlet (1.4.5.final), io.undertow:undertow-websockets-jsr (1.4.5.final) potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.4.5.final)

io.undertow:undertow-core MAVEN version 1.4.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.5.final - io.undertow:undertow-websockets-jsr 1.4.5.final Source cves:...