Skip to content
OpenAdvisories

Archive

19 August 2014

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High —

    Incorrect Privilege Assignment in RESTEasy

    RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote a…