Search for packages
| purl | pkg:deb/debian/resteasy@3.1.0-1?distro=sid |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-17rd-f1mq-kfgr | Exposure of Sensitive Information to an Unauthorized Actor RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs. |
CVE-2016-6345
GHSA-vxhj-3x7p-jxp5 |
| VCID-7uh1-a5ng-rqch | JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attack JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack. |
CVE-2016-6348
GHSA-9xfc-j5mf-9w5p |
| VCID-jms5-sctw-mkc5 | Cross-site Scripting Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2016-6347
GHSA-r346-rmrg-qpgh |
| VCID-wbgc-tuj3-47by | Uncontrolled Resource Consumption RESTEasy enables `GZIPInterceptor`, which allows remote attackers to cause a denial of service via unspecified vectors. |
CVE-2016-6346
GHSA-wxvr-vqfp-9cqw |