CVE-2021-20293
EUVD-2021-126910.06.2021, 12:15
A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The highest threat from this vulnerability is to data confidentiality and integrity.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | resteasy | 𝑥 ≤ 4.6.0 |
| netapp | oncommand_insight | - |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| resteasy |
| ||||||||||||||||||||||||
| resteasy3.0 |
|