{"id":"CVE-2012-0818","aliases":["EUVD-2022-5634","GHSA-wrrh-g7h3-gqmx","RHSA-2012:0421","RHSA-2012:1058","RHSA-2012:1059","RHSA-2013:1263"],"status":"published","title":"Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy","description":"RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03213,"percentile":0.88273,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2012-11-23T20:00:00Z","modified":"2026-08-05T10:45:09Z","fixes":[{"ecosystem":"Maven","package":"org.jboss.resteasy:resteasy-client","fixed_in":["2.3.1"],"sources":["ghsa","osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"otopi","fixed_in":["0:1.1.0-1.el6ev"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"otopi-devel","fixed_in":["0:1.1.0-1.el6ev"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"otopi-java","fixed_in":["0:1.1.0-1.el6ev"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"otopi-repolib","fixed_in":["0:1.1.0-1.el6ev"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"ovirt-host-deploy","fixed_in":["0:1.1.0-1.el6ev"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"ovirt-host-deploy-java","fixed_in":["0:1.1.0-1.el6ev"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"ovirt-host-deploy-repolib","fixed_in":["0:1.1.0-1.el6ev"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"python-daemon","fixed_in":["0:1.5.2-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"python-kitchen","fixed_in":["0:1.1.1-2.el6ev"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"python-lockfile","fixed_in":["0:0.8-5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"python-ply","fixed_in":["0:3.3-7.el6ev"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"redhat-access-plugin-storage","fixed_in":["0:2.1.0-0.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc","fixed_in":["0:2.1.0-0.bb10.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-backend","fixed_in":["0:2.1.0-0.bb10.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-cli","fixed_in":["0:2.1.0.0-0.bb3a.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-dbscripts","fixed_in":["0:2.1.0-0.bb10.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-log-collector","fixed_in":["0:2.1-0.1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-restapi","fixed_in":["0:2.1.0-0.bb10.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-sdk","fixed_in":["0:2.1.0.0-0.bb3a.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-setup","fixed_in":["0:2.1.0-0.bb10.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-tools","fixed_in":["0:2.1.0-0.bb10.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-webadmin-portal","fixed_in":["0:2.1.0-0.bb10.el6rhs"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jboss.resteasy:resteasy-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jboss.resteasy:resteasy-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1"}]}],"versions":["1.0-beta-6","1.0-beta-7","1.0-beta-8"]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-genericapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-iso-uploader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-jboss-deps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-log-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-notification-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-tools-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-userportal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3_0001-3.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"resteasy-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"resteasy-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"resteasy-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"resteasy-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"resteasy-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"resteasy-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"resteasy-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"resteasy-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"resteasy-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"resteasy-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"resteasy-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"resteasy-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"resteasy-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"resteasy-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"resteasy-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-10.CP02_patch01.1.ep5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"otopi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el6ev"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"otopi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el6ev"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"otopi-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el6ev"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"otopi-repolib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el6ev"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"ovirt-host-deploy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el6ev"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"ovirt-host-deploy-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el6ev"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"ovirt-host-deploy-repolib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el6ev"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"python-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"python-kitchen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-2.el6ev"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"python-lockfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"python-ply","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3-7.el6ev"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"redhat-access-plugin-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-0.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-0.bb10.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-0.bb10.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0.0-0.bb3a.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-0.bb10.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-log-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1-0.1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-0.bb10.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0.0-0.bb3a.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-0.bb10.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-0.bb10.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2.1:console:el6","package":"rhsc-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-0.bb10.el6rhs"}]}]}],"products":[{"vendor":"redhat","product":"resteasy"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=785631","tags":["x_refsource_MISC","x_transferred","web","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1059.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web"]},{"url":"http://www.securityfocus.com/bid/51748","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://issues.jboss.org/browse/RESTEASY-637","tags":["x_refsource_CONFIRM","x_transferred","Patch","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1056.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1058.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web"]},{"url":"http://www.securityfocus.com/bid/51766","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.osvdb.org/78679","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0519.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web"]},{"url":"http://secunia.com/advisories/50084","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0371.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1057.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72808","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://secunia.com/advisories/48954","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0441.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web"]},{"url":"http://secunia.com/advisories/47832","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/57719","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/57716","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/47818","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0372.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://secunia.com/advisories/48697","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1125.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0818","tags":["advisory"]},{"url":"https://github.com/resteasy/resteasy/commit/71ace879cf92d323bfa4d3e88db0c3059109bbf6","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0421","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0441","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0519","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1056","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1057","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1058","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1059","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1125","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1263","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0371","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0372","tags":["web"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0818","tags":["web","report"]},{"url":"https://web.archive.org/web/20200229044434/http://www.securityfocus.com/bid/51748","tags":["web"]},{"url":"https://web.archive.org/web/20200229045254/https://www.securityfocus.com/bid/51766/"},{"url":"https://github.com/advisories/GHSA-wrrh-g7h3-gqmx"},{"url":"https://web.archive.org/web/20200229045254/https://www.securityfocus.com/bid/51766","tags":["web"]},{"url":"https://github.com/resteasy/Resteasy","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/Installation_Guide/chap-Installation_Guide-Installing_the_RHEV_Manager-Upgrades.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0421.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-5245","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-5245","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-5245","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0818","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1058.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1059.json","tags":["advisory"]},{"url":"https://access.redhat.com/support/offerings/techpreview/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=863929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=887806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=889942","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1263.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-0818","description":"RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.","status":"published","published":"2012-11-23T20:00:00Z","modified":"2024-08-06T18:38:14.782Z","updated_at":"2026-11-02T14:34:52.638543Z"}],"euvd":[{"id":"EUVD-2022-5634","description":"RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.","status":"published","published":"2012-11-23T20:00:00Z","modified":"2024-08-06T18:38:14Z","updated_at":"2026-11-03T01:56:19.818597Z"}],"ghsa":[{"id":"GHSA-wrrh-g7h3-gqmx","title":"Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy","description":"RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.","status":"published","published":"2022-05-17T01:49:58Z","modified":"2023-02-15T20:02:49Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:36:45.67005Z"}],"nvd":[{"id":"CVE-2012-0818","description":"RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.","status":"published","published":"2012-11-23T20:55:02.32Z","modified":"2026-06-16T23:38:19.207Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:16.536025Z"}],"osv":[{"id":"GHSA-wrrh-g7h3-gqmx","title":"Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy","description":"RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.","status":"published","published":"2022-05-17T01:49:58Z","modified":"2024-12-03T06:03:01.875838Z","cwes":["CWE-200"],"updated_at":"2026-11-02T15:46:59.131095Z"},{"id":"RHSA-2012:0421","title":"Red Hat Security Advisory: rhevm security and bug fix update","status":"published","published":"2024-09-13T07:59:12Z","modified":"2026-08-05T10:01:43Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1058","title":"Red Hat Security Advisory: resteasy security update","status":"published","published":"2024-09-13T07:59:26Z","modified":"2026-08-05T10:45:09.915668428Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1059","title":"Red Hat Security Advisory: resteasy security update","status":"published","published":"2024-09-13T07:59:30Z","modified":"2026-08-05T10:01:49Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2013:1263","title":"Red Hat Security Advisory: Red Hat Storage Console 2.1 security update","status":"published","published":"2024-09-13T08:02:39Z","modified":"2026-08-05T10:02:18Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}