Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-20289

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-244r-fcj3-ghjq

Exposure of class information in RESTEasy A flaw was found in RESTEasy in all current versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.

gitlab/maven/org.jboss.resteasy/resteasy-client/CVE-2021-20289

Information Exposure Through an Error Message A flaw was found in RESTEasy where the endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.

gitlab/maven/org.jboss.resteasy/resteasy-core/CVE-2021-20289

Information Exposure Through an Error Message A flaw was found in RESTEasy in all versions of RESTEasy up to Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.

gitlab/maven/org.jboss.resteasy/resteasy-jaxrs/CVE-2021-20289

Information Exposure Through an Error Message A flaw was found in RESTEasy where the endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.