resteasy vulnerabilities (Rocky Linux)
42 vulnerabilities.
-
resteasyRocky Linux Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config 7.4 High -
resteasyRocky Linux Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) 7.5 High -
resteasyRocky Linux Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) 7.2 High -
resteasyRocky Linux Resteasy-core: resteasy sourceprovider remote unauthenticated file read 7.5 High -
resteasyRocky Linux Ca: token authentication bypass vulnerability 7.5 High -
resteasyRocky Linux Access to external entities when parsing XML documents can lead to XML external entity (XXE)... 7.5 High -
resteasyRocky Linux Deeply nested json in jackson-databind 7.5 High -
resteasyRocky Linux Response mix-up with WebSocket concurrent send and close 8.6 High -
resteasyRocky Linux A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a... 6.1 Medium -
resteasyRocky Linux A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it... 6.1 Medium -
resteasyRocky Linux In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests... 6.8 Medium -
resteasyRocky Linux Improper Input Validation in RESTEasy 7.5 High -
resteasyRocky Linux Potential XSS vulnerability in jQuery 6.9 Medium -
resteasyRocky Linux jQuery has a potential XSS vulnerability 6.9 Medium -
resteasyRocky Linux A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA)... 4.3 Medium -
resteasyRocky Linux A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where... 4.3 Medium -
resteasyRocky Linux jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High -
resteasyRocky Linux jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High -
resteasyRocky Linux A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the... 4.7 Medium -
resteasyRocky Linux jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
resteasyRocky Linux jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
resteasyRocky Linux jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
resteasyRocky Linux Improper Privilege Management in Tomcat 9.8 Critical -
resteasyRocky Linux Potential HTTP request smuggling in Apache Tomcat 4.8 Medium -
resteasyRocky Linux Deserialization of Untrusted Data in jackson-databind 9.8 Critical -
resteasyRocky Linux Deserialization of Untrusted Data in jackson-databind 9.8 Critical -
resteasyRocky Linux jackson-databind polymorphic typing issue 9.8 Critical -
resteasyRocky Linux jackson-databind polymorphic typing issue 9.8 Critical -
resteasyRocky Linux Polymorphic Typing in FasterXML jackson-databind 9.8 Critical -
resteasyRocky Linux Polymorphic Typing issue in FasterXML jackson-databind 9.8 Critical -
resteasyRocky Linux Polymorphic Typing issue in FasterXML jackson-databind 9.8 Critical -
resteasyRocky Linux Deserialization of Untrusted Data in FasterXML jackson-databind 5.9 Medium -
resteasyRocky Linux XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
resteasyRocky Linux Bootstrap Vulnerable to Cross-Site Scripting 6.1 Medium -
resteasyRocky Linux Bootstrap Cross-site Scripting vulnerability 6.1 Medium -
resteasyRocky Linux Apache Tomcat Open Redirect vulnerability 4.3 Medium -
resteasyRocky Linux Apache Tomcat Race Condition vulnerability 5.9 Medium -
resteasyRocky Linux The host name verification missing in Apache Tomcat 7.5 High -
resteasyRocky Linux Bootstrap Cross-site Scripting vulnerability 6.1 Medium -
resteasyRocky Linux Bootstrap vulnerable to Cross-Site Scripting (XSS) 6.1 Medium -
resteasyRocky Linux The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins 9.8 Critical -
resteasyRocky Linux Cross-Site Scripting (XSS) in jquery 6.1 Medium