Lucene search
Veracode Vulnerability DatabaseVERACODE:25501HistoryMay 27, 2020 - 6:30 a.m.
Improper Input Validation
2020-05-2706:30:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
EPSS
0.001
Percentile
44.4%
resteasy-jaxrs is vulnerble to improper input validation. The attack exists because it does not properly handle the response headers in MediaTypeHeaderDelegate.java, leading to a return of an illegal header to be integrated in the server’s response.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1695
github.com/resteasy/Resteasy/pull/2352
issues.redhat.com/browse/RESTEASY-2559
lists.fedoraproject.org/archives/list/[email protected]/message/IJDMT443YZWCBS5NS76XZ7TL3GK7BXHL/
lists.fedoraproject.org/archives/list/[email protected]/message/RX22C6I56BJUER76IIPYHGZIWBQIU3CQ/
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0039)
2022-01-28 00:00:00
Fedora: Security Advisory for resteasy (FEDORA-2020-239503f5fa)
2020-12-09 00:00:00
Fedora: Security Advisory for resteasy (FEDORA-2020-df970da9fc)
2020-12-09 00:00:00
nessus
nessus
CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2021:1775)
2021-05-19 00:00:00
Oracle Linux 8 : pki-core:10.6 / and / pki-deps:10.6 (ELSA-2021-1775)
2021-11-12 00:00:00
RHEL 7 : candlepin (Unpatched Vulnerability)
2024-06-03 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: resteasy-3.0.26-6.fc33
2020-12-09 01:17:06
[SECURITY] Fedora 32 Update: resteasy-3.0.26-6.fc32
2020-12-09 01:23:21
redhat
redhat
nvd
nvd
CVE-2020-1695
2020-05-19 15:15:11
ubuntucve
ubuntucve
CVE-2020-1695
2020-05-19 00:00:00
rocky
rocky
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2021-05-18 06:04:17
osv
osv
CVE-2020-1695
2020-05-19 15:15:11
Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2021-05-18 06:04:17
Improper Input Validation in RESTEasy
2022-05-24 22:01:21
mageia
mageia
Updated resteasy packages fix a security vulnerability
2021-01-17 19:07:01
prion
prion
Input validation
2020-05-19 15:15:00
redhatcve
redhatcve
CVE-2020-1695
2020-04-15 05:59:57
debiancve
debiancve
CVE-2020-1695
2020-05-19 15:15:11
cvelist
cvelist
CVE-2020-1695
2020-05-19 14:13:10
cve
cve
CVE-2020-1695
2020-05-19 15:15:11
almalinux
almalinux
github
github
Improper Input Validation in RESTEasy
2022-05-24 22:01:21
oraclelinux
oraclelinux
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2021-05-25 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2375
2024-03-19 12:36:24