RESTEasy CVE-2017-7492 XML External Entity Injection Vulnerability
BID:98430
Info
RESTEasy CVE-2017-7492 XML External Entity Injection Vulnerability
| Bugtraq ID: | 98430 |
| Class: | Design Error |
| CVE: |
CVE-2017-7492 |
| Remote: | Yes |
| Local: | No |
| Published: | May 11 2017 12:00AM |
| Updated: | May 11 2017 12:00AM |
| Credit: | Katerina Novotna |
| Vulnerable: |
Redhat Resteasy - Redhat JBoss EAP 7 0 |
| Not Vulnerable: | |
Discussion
RESTEasy CVE-2017-7492 XML External Entity Injection Vulnerability
RESTEasy is prone to an XML External Entity injection vulnerability.
Attackers can exploit this issue to gain access to sensitive information or cause denial-of-service conditions.
RESTEasy is prone to an XML External Entity injection vulnerability.
Attackers can exploit this issue to gain access to sensitive information or cause denial-of-service conditions.
Exploit / POC
RESTEasy CVE-2017-7492 XML External Entity Injection Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RESTEasy CVE-2017-7492 XML External Entity Injection Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RESTEasy CVE-2017-7492 XML External Entity Injection Vulnerability
References:
References: