Red Hat Security AdvisoryRHSA-2012:1058
resteasy security update
Released 2012-07-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Web Platform 5 for RHEL 5 Server resteasy-1.2.1-10.CP02_patch01.1.ep5.el5, resteasy-examples-1.2.1-10.CP02_patch01.1.ep5.el5, resteasy-javadoc-1.2.1-10.CP02_patch01.1.ep5.el5 +1
- Red Hat JBoss Web Platform 5 for RHEL 6 Server resteasy-1.2.1-10.CP02_patch01.1.ep5.el6, resteasy-examples-1.2.1-10.CP02_patch01.1.ep5.el6, resteasy-javadoc-1.2.1-10.CP02_patch01.1.ep5.el6 +1
Fixes 2 records
Priority LOW 29
RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03213 · Published 2012-11-23 · Partial fix · 2.3.1 CWE-200
Priority LOW 29
The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, a…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03213 · Published 2012-11-23 · Partial fix · 2.3.2 CWE-200
