GitHub Advisoryadvisory · Maven

GHSA-57q5-x8jf-g7h8 Inconsistent Interpretation of HTTP Requests in Red Hat JBoss EAP

HIGH Published 2022-05-13 Modified 2025-01-15 Official page ↗
Aliases
CVE-2017-7561
Ecosystem
Maven
Packages
org.jboss.resteasy:resteasy-jaxrs
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-444
Reviewed
2022-07-01

Affected packages

• Maven org.jboss.resteasy:resteasy-jaxrs: >= 3.0.7.Final, < 3.0.25.Final → fixed in 3.0.25.Final • Maven org.jboss.resteasy:resteasy-jaxrs: >= 3.1.4.Final, < 3.5.0.CR1 → fixed in 3.5.0.CR1

Description

Red Hat JBoss EAP version 3.0.7.Final until 3.0.25.Final, 3.5.0.CR1, and 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.

Related

Alias · CVE (1)

  • CVE-2017-7561 Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS… vulnerability

Weakness · CWE (1)

  • CWE-444 Inconsistent Interpretation of HTTP Requests weakness

References