GHSA-57q5-x8jf-g7h8HighCVSS 7.5

Inconsistent Interpretation of HTTP Requests in Red Hat JBoss EAP

Published
May 13, 2022
Last Modified
January 15, 2025

🔗 CVE IDs covered (1)

CVE-2017-7561 →

📋 Description

Red Hat JBoss EAP version 3.0.7.Final until 3.0.25.Final, 3.5.0.CR1, and 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.

🎯 Affected products2

  • maven/org.jboss.resteasy:resteasy-jaxrs:>= 3.0.7.Final, <= 3.0.24.Final
  • maven/org.jboss.resteasy:resteasy-jaxrs:= 3.1.4.Final

🔗 References (11)