Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS01N3E1LXg4amYtZzdoOM4AASa4
Inconsistent Interpretation of HTTP Requests in Red Hat JBoss EAP
Red Hat JBoss EAP version 3.0.7.Final until 3.0.25.Final, 3.5.0.CR1, and 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.
Permalink: https://github.com/advisories/GHSA-57q5-x8jf-g7h8JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01N3E1LXg4amYtZzdoOM4AASa4
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: almost 2 years ago
Updated: over 1 year ago
CVSS Score: 7.5
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Identifiers: GHSA-57q5-x8jf-g7h8, CVE-2017-7561
References:
- https://nvd.nist.gov/vuln/detail/CVE-2017-7561
- https://access.redhat.com/errata/RHSA-2018:0002
- https://access.redhat.com/errata/RHSA-2018:0003
- https://access.redhat.com/errata/RHSA-2018:0004
- https://access.redhat.com/errata/RHSA-2018:0005
- https://access.redhat.com/errata/RHSA-2018:0478
- https://access.redhat.com/errata/RHSA-2018:0479
- https://access.redhat.com/errata/RHSA-2018:0480
- https://access.redhat.com/errata/RHSA-2018:0481
- https://issues.jboss.org/browse/RESTEASY-1704
- https://github.com/advisories/GHSA-57q5-x8jf-g7h8
Affected Packages
maven:org.jboss.resteas:resteasy-jaxrs
Affected Version Ranges: = 3.1.4.Final, >= 3.0.7.Final, <= 3.0.24.FinalFixed in: 3.5.0.CR1, 3.0.25.Final