CVE-2020-1695

State: Published
Severity: 7.5 High
Published: May 19, 2020
Updated: Aug 4, 2024
Reserved: Nov 27, 2019

Description

A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed.

Scores

CVSS	Score	Vector	Source
3.0	7.5 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	redhat

Weaknesses

CWE-20

Affected Products

Product	Versions
resteasyRed Hat	all resteasy 3.x.x versions prior to 3.12.0.FinalAffected all resteasy 4.x.x versions prior to 4.6.0.FinalAffected

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1695
FEDORA-2020-239503f5favendor-advisory
FEDORA-2020-df970da9fcvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.