Cross-Site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-20293 · ADVISORY
• bugzilla.redhat.com/show_bug.cgi · WEB
• security.netapp.com/advisory/ntap-20210727-0005 · WEB
• security.netapp.com/advisory/ntap-20210727-0005 · Third Party Advisory

org.jboss.resteasy:resteasy-bom のその他の脆弱性

• CVE-2020-14326高 7.5A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requ…
• CVE-2020-10688中 6.1A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly ha…
• CVE-2020-25724中 4.3A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to pri…
• CVE-2016-9606高 8.1JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untr…