Search CVE reports
21 – 22 of 22 results
Some fixes available 1 of 12
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.
2 affected packages
resteasy, resteasy3.0
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | — | Not affected | Not affected | Not affected | Not in release |
| resteasy3.0 | — | Not affected | Not affected | Not affected | Not affected |
DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via...
1 affected package
resteasy
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| resteasy | — | — | — | — | Not in release |