Description

HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy

Remediation

References

https://access.redhat.com/security/cve/cve-2014-3599

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3599

Related Vulnerabilities

CVE-2022-38723 Vulnerability in maven package io.gravitee.apim.rest.api:gravitee-apim-rest-api-service

CVE-2022-44262 Vulnerability in maven package org.ff4j:ff4j-core

CVE-2022-36894 Vulnerability in maven package org.jenkins-ci.plugins:clif-performance-testing

CVE-2018-3771 Vulnerability in npm package statics-server

CVE-2017-9805 Vulnerability in maven package org.apache.struts:struts2-core

Severity

High

Classification

CWE-611 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Tags

Third Party Advisory Issue Tracking Patch