Red Hat Security Advisory

RHSA-2021:4100

Red Hat Integration - Service Registry release and security update [2.0.2.GA]

Released 2021-11-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHINT Service Registry 2.0.2 GA

Fixes 3 records

TI-2020-10932 CVE-2020-13956 · GHSA-7r82-7xv7-xcpj

Improper input validation in Apache HttpClient

MEDIUM 42

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request executio…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.09032 Published 2020-12-02 Partial fix · 4.5.13, 5.0.3 CWE-20

TI-2021-03583 CVE-2021-20293 · GHSA-5h26-c766-g93v

Cross-site scripting in RESTEasy

LOW 29

A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces Med…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00856 Published 2021-06-10 Partial fix CWE-79

TI-2021-03579 CVE-2021-20289 · GHSA-244r-fcj3-ghjq

Information disclosure through error messages in resteasy

LOW 27

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.014 Published 2021-03-26 Partial fix · 4.6.1, 4.5.10 +1 CWE-209