Skip to content
OpenAdvisories

Package · Maven

org.jboss.resteasy:resteasy-bom

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-20293

    Cross-Site Scripting

    A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to…

    org.jboss.resteasy:resteasy-bom org.jboss.resteasy:resteasy-core Maven
  • Medium 5.4
    CVE-2020-10688

    Cross-site scripting in RESTEasy

    A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS a…

    resteasy resteasy3.0 resteasy3.0 org.jboss.resteasy:resteasy-bom Debian Ubuntu Maven
  • Medium 4.3
    CVE-2020-25724

    Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy

    A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before re…

    org.jboss.resteasy:resteasy-bom Maven