Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2014-7839

DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.

CVSS v2:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:L/Au:N/C:P/I:N/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
redhat / resteasy 2.3.7 2.3.7.x
redhat / resteasy 3.0.9 3.0.9.x
org.jboss.resteasy / resteasy-jaxrs - 3.0.11.Final