Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-25724 · ADVISORY
• access.redhat.com/security/cve/cve-2020-25724 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• security.netapp.com/advisory/ntap-20210702-0003 · WEB
• security.netapp.com/advisory/ntap-20210702-0003 · Third Party Advisory

org.jboss.resteasy:resteasy-bom のその他の脆弱性

• CVE-2021-20293中 6.1A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly h…
• CVE-2020-14326高 7.5A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requ…
• CVE-2020-10688中 6.1A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly ha…
• CVE-2016-9606高 8.1JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untr…