What is GHSA-9xfc-j5mf-9w5p?

GHSA-9xfc-j5mf-9w5p is a security advisory published by GitHub Security Advisories with Medium severity. JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attack

Which CVE IDs does GHSA-9xfc-j5mf-9w5p cover?

GHSA-9xfc-j5mf-9w5p covers the following CVE IDs: CVE-2016-6348. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9xfc-j5mf-9w5p?

GHSA-9xfc-j5mf-9w5p has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-9xfc-j5mf-9w5p?

GHSA-9xfc-j5mf-9w5p affects 1 product, including: maven/org.jboss.resteasy:resteasy-client:\u003c 3.0.20.Final.

GHSA-9xfc-j5mf-9w5pMediumCVSS 6.1

JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attack

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

January 31, 2023

🔗 CVE IDs covered (1)

CVE-2016-6348 →

📋 Description

JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack.

🎯 Affected products1

maven/org.jboss.resteasy:resteasy-client:< 3.0.20.Final

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2016-6348
https://bugzilla.redhat.com/show_bug.cgi?id=1372129
https://github.com/advisories/GHSA-9xfc-j5mf-9w5p