Red Hat Security AdvisoryRHSA-2014:1040
Red Hat JBoss Enterprise Application Platform 6.3.0 security update
Released 2014-08-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server resteasy-2.3.8-5.SP1_redhat_1.1.ep6.el5
- Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server resteasy-2.3.8-5.SP1_redhat_1.1.ep6.el6
- Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server resteasy-2.3.8-5.SP1_redhat_1.1.ep6.el7
Fixes 1 record
Priority MEDIUM 40
RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04572 · Published 2014-08-19 · Partial fix · 2.3.8.SP2, 3.0.9.Final CWE-266
