CVE-2020-10688

CVE-2020-10688 affects RESTEasy prior to 3.11.1.Final and 4.5.3.Final, where improper URL encoding during RESTEASY003870 exception handling enables a reflected XSS attack. The issue resides in the RESTEasy component and enables an attacker to execute script in a victim’s browser when user-supplie...

CVE-2020-25633

CVE-2020-25633 – RESTEasy client information disclosure . The issue affects RESTEasy’s client implementation (all versions up to 4.5.6.Final). When a server responds with a WebApplicationException during a RESTEasy client call, an attacker could potentially obtain the server’s sensitive informati...

CVE-2020-25724

RESTEasy CVE-2020-25724: A flaw causes an incorrect HTTP response which can lead to information disclosure and partial confidentiality impact. Affected are RESTEasy versions before 2.0.0.Alpha3. Exploitation details are not provided in the available documents; no explicit exploit vectors, mitiga­...