PT-2019-6418 · Red Hat+6 · Resteasy+7
Mirko Selber
+1
·
Publicado
2019-07-16
·
Atualizado
2025-10-14
·
CVE-2020-1695
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
resteasy versions 3.x.x prior to 3.12.0.Final
resteasy versions 4.x.x prior to 4.6.0.Final
Description
A flaw was found in resteasy where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed. The issue is related to insufficient input validation, which can be exploited by a remote attacker to modify information.
Recommendations
For resteasy versions 3.x.x prior to 3.12.0.Final, update to version 3.12.0.Final or later.
For resteasy versions 4.x.x prior to 4.6.0.Final, update to version 4.6.0.Final or later.
As a temporary workaround, consider implementing proper input validation to prevent illegal headers from being integrated into the server's response.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linuxmint
Red Hat
Red Os
Rocky Linux
Ubuntu
Resteasy