CVE-2016-9606
- State
- Published
- Severity
- Not scored
- Published
- Mar 9, 2018
- Updated
- Sep 16, 2024
- Reserved
- Nov 23, 2016
Description
JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
RESTEasyRed Hat, Inc. |
|
References
- RHSA-2017:1411vendor-advisory
- RHSA-2017:1409vendor-advisory
- 94940vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1400644
- RHSA-2017:1675vendor-advisory
- 1038524vdb-entry
- RHSA-2017:1254vendor-advisory
- RHSA-2017:1410vendor-advisory
- RHSA-2017:1255vendor-advisory
- RHSA-2017:1412vendor-advisory
- RHSA-2018:2909vendor-advisory
- RHSA-2017:1256vendor-advisory
- RHSA-2017:1253vendor-advisory
- RHSA-2017:1260vendor-advisory
- RHSA-2017:1676vendor-advisory
- RHSA-2018:2913vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.