Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.jboss.resteasy/resteasy-core@4.6.0
Typemaven
Namespaceorg.jboss.resteasy
Nameresteasy-core
Version4.6.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.7.8.Final
Latest_non_vulnerable_version6.2.3.Final
Affected_by_vulnerabilities
0
url VCID-2thz-p7bw-7bdk
vulnerability_id VCID-2thz-p7bw-7bdk
summary 
Exposure of class information in RESTEasy
A flaw was found in RESTEasy in all current versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20289.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20289.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20289
reference_id
reference_type
scores
0
value 0.00084
scoring_system epss
scoring_elements 0.24319
published_at 2026-04-24T12:55:00Z
1
value 0.00084
scoring_system epss
scoring_elements 0.24432
published_at 2026-04-21T12:55:00Z
2
value 0.00088
scoring_system epss
scoring_elements 0.25264
published_at 2026-04-01T12:55:00Z
3
value 0.00088
scoring_system epss
scoring_elements 0.2534
published_at 2026-04-02T12:55:00Z
4
value 0.00088
scoring_system epss
scoring_elements 0.2538
published_at 2026-04-04T12:55:00Z
5
value 0.00088
scoring_system epss
scoring_elements 0.25157
published_at 2026-04-07T12:55:00Z
6
value 0.00088
scoring_system epss
scoring_elements 0.25227
published_at 2026-04-08T12:55:00Z
7
value 0.00088
scoring_system epss
scoring_elements 0.25272
published_at 2026-04-09T12:55:00Z
8
value 0.00088
scoring_system epss
scoring_elements 0.25287
published_at 2026-04-11T12:55:00Z
9
value 0.00088
scoring_system epss
scoring_elements 0.25244
published_at 2026-04-12T12:55:00Z
10
value 0.00088
scoring_system epss
scoring_elements 0.25191
published_at 2026-04-13T12:55:00Z
11
value 0.00088
scoring_system epss
scoring_elements 0.252
published_at 2026-04-16T12:55:00Z
12
value 0.00088
scoring_system epss
scoring_elements 0.2519
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20289
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1935927
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1935927
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1941544
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1941544
4
reference_url https://issues.redhat.com/browse/RESTEASY-2843
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.redhat.com/browse/RESTEASY-2843
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20289
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20289
6
reference_url https://security.netapp.com/advisory/ntap-20210528-0008
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20210528-0008
7
reference_url https://security.netapp.com/advisory/ntap-20210528-0008/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20210528-0008/
8
reference_url https://www.oracle.com/security-alerts/cpuapr2022.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuapr2022.html
9
reference_url https://github.com/advisories/GHSA-244r-fcj3-ghjq
reference_id GHSA-244r-fcj3-ghjq
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-244r-fcj3-ghjq
10
reference_url https://access.redhat.com/errata/RHSA-2021:3700
reference_id RHSA-2021:3700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3700
11
reference_url https://access.redhat.com/errata/RHSA-2021:3880
reference_id RHSA-2021:3880
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3880
12
reference_url https://access.redhat.com/errata/RHSA-2021:4100
reference_id RHSA-2021:4100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4100
13
reference_url https://access.redhat.com/errata/RHSA-2021:4676
reference_id RHSA-2021:4676
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4676
14
reference_url https://access.redhat.com/errata/RHSA-2021:4677
reference_id RHSA-2021:4677
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4677
15
reference_url https://access.redhat.com/errata/RHSA-2021:4679
reference_id RHSA-2021:4679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4679
16
reference_url https://access.redhat.com/errata/RHSA-2021:4767
reference_id RHSA-2021:4767
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4767
17
reference_url https://access.redhat.com/errata/RHSA-2021:5149
reference_id RHSA-2021:5149
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:5149
18
reference_url https://access.redhat.com/errata/RHSA-2021:5150
reference_id RHSA-2021:5150
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:5150
19
reference_url https://access.redhat.com/errata/RHSA-2021:5151
reference_id RHSA-2021:5151
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:5151
20
reference_url https://access.redhat.com/errata/RHSA-2021:5154
reference_id RHSA-2021:5154
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:5154
21
reference_url https://access.redhat.com/errata/RHSA-2021:5170
reference_id RHSA-2021:5170
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:5170
22
reference_url https://access.redhat.com/errata/RHSA-2022:0146
reference_id RHSA-2022:0146
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0146
23
reference_url https://access.redhat.com/errata/RHSA-2022:0151
reference_id RHSA-2022:0151
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0151
24
reference_url https://access.redhat.com/errata/RHSA-2022:0152
reference_id RHSA-2022:0152
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0152
25
reference_url https://access.redhat.com/errata/RHSA-2022:0155
reference_id RHSA-2022:0155
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0155
26
reference_url https://access.redhat.com/errata/RHSA-2022:0164
reference_id RHSA-2022:0164
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0164
27
reference_url https://access.redhat.com/errata/RHSA-2022:1179
reference_id RHSA-2022:1179
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1179
28
reference_url https://access.redhat.com/errata/RHSA-2022:6407
reference_id RHSA-2022:6407
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6407
29
reference_url https://usn.ubuntu.com/7351-1/
reference_id USN-7351-1
reference_type
scores
url https://usn.ubuntu.com/7351-1/
30
reference_url https://usn.ubuntu.com/7630-1/
reference_id USN-7630-1
reference_type
scores
url https://usn.ubuntu.com/7630-1/
fixed_packages
0
url pkg:maven/org.jboss.resteasy/resteasy-core@4.6.1
purl pkg:maven/org.jboss.resteasy/resteasy-core@4.6.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.resteasy/resteasy-core@4.6.1
1
url pkg:maven/org.jboss.resteasy/resteasy-core@4.7.0.Final
purl pkg:maven/org.jboss.resteasy/resteasy-core@4.7.0.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-etyq-9yys-tkdf
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.resteasy/resteasy-core@4.7.0.Final
aliases CVE-2021-20289, GHSA-244r-fcj3-ghjq
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2thz-p7bw-7bdk
1
url VCID-dww4-f31f-h7az
vulnerability_id VCID-dww4-f31f-h7az
summary A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The highest threat from this vulnerability is to data confidentiality and integrity.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20293.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20293.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20293
reference_id
reference_type
scores
0
value 0.00402
scoring_system epss
scoring_elements 0.60818
published_at 2026-04-24T12:55:00Z
1
value 0.00402
scoring_system epss
scoring_elements 0.60792
published_at 2026-04-08T12:55:00Z
2
value 0.00402
scoring_system epss
scoring_elements 0.60807
published_at 2026-04-09T12:55:00Z
3
value 0.00402
scoring_system epss
scoring_elements 0.60828
published_at 2026-04-21T12:55:00Z
4
value 0.00402
scoring_system epss
scoring_elements 0.60815
published_at 2026-04-12T12:55:00Z
5
value 0.00402
scoring_system epss
scoring_elements 0.60796
published_at 2026-04-13T12:55:00Z
6
value 0.00402
scoring_system epss
scoring_elements 0.60838
published_at 2026-04-16T12:55:00Z
7
value 0.00402
scoring_system epss
scoring_elements 0.60844
published_at 2026-04-18T12:55:00Z
8
value 0.00402
scoring_system epss
scoring_elements 0.60676
published_at 2026-04-01T12:55:00Z
9
value 0.00402
scoring_system epss
scoring_elements 0.6075
published_at 2026-04-02T12:55:00Z
10
value 0.00402
scoring_system epss
scoring_elements 0.60779
published_at 2026-04-04T12:55:00Z
11
value 0.00402
scoring_system epss
scoring_elements 0.60743
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20293
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1942819
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1942819
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20293
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20293
4
reference_url https://security.netapp.com/advisory/ntap-20210727-0005
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20210727-0005
5
reference_url https://security.netapp.com/advisory/ntap-20210727-0005/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20210727-0005/
6
reference_url https://github.com/advisories/GHSA-5h26-c766-g93v
reference_id GHSA-5h26-c766-g93v
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5h26-c766-g93v
7
reference_url https://access.redhat.com/errata/RHSA-2021:4100
reference_id RHSA-2021:4100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4100
8
reference_url https://access.redhat.com/errata/RHSA-2022:1029
reference_id RHSA-2022:1029
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1029
fixed_packages
0
url pkg:maven/org.jboss.resteasy/resteasy-core@4.6.1.Alpha1
purl pkg:maven/org.jboss.resteasy/resteasy-core@4.6.1.Alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2thz-p7bw-7bdk
1
vulnerability VCID-etyq-9yys-tkdf
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.resteasy/resteasy-core@4.6.1.Alpha1
1
url pkg:maven/org.jboss.resteasy/resteasy-core@4.6.1
purl pkg:maven/org.jboss.resteasy/resteasy-core@4.6.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.resteasy/resteasy-core@4.6.1
aliases CVE-2021-20293, GHSA-5h26-c766-g93v
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dww4-f31f-h7az
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.resteasy/resteasy-core@4.6.0