Read the docs
Red Hat Security Advisory

RHSA-2017:1255

Red Hat JBoss Enterprise Application Platform security update

Released 2017-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 44

JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0597 Published 2018-03-09 Partial fix · 3.1.2.Final CWE-20