GHSA-xrh2-c3rm-35jr

Source

https://github.com/advisories/GHSA-xrh2-c3rm-35jr

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-xrh2-c3rm-35jr/GHSA-xrh2-c3rm-35jr.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-xrh2-c3rm-35jr

Aliases

CVE-2014-3599

Published

2022-05-24T22:01:08Z

Modified

2023-11-08T03:57:39.298826Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator

Summary

HornetQ REST vulnerable to Improper Restriction of XML External Entity Reference

Details

HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy.

Database specific

{
    "nvd_published_at": "2019-11-12T14:15:00Z",
    "github_reviewed_at": "2022-11-22T18:45:47Z",
    "severity": "MODERATE",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-611"
    ]
}

References

Affected packages

Maven / org.hornetq.rest:hornetq-rest

Package

Name: org.hornetq.rest:hornetq-rest; View open source insights on deps.dev
Purl: pkg:maven/org.hornetq.rest/hornetq-rest

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.5.0.Beta1

Affected versions

1.*

1.0-beta-1

1.0-beta-2

1.0-beta-3

2.*

2.2.2.Final

2.2.2.1

2.2.2.2

2.3.0.Alpha

2.3.0.BETA1

2.3.0.BETA2

2.3.0.BETA3

2.3.0.CR1

2.3.0.CR2

2.3.0.Final

2.3.1.Final

2.3.2.Final

2.3.3.Final

2.3.4.Final

2.3.5.Final

2.3.6.Final

2.3.7.Final

2.3.8.Final

2.3.9.Final

2.3.10.Final

2.3.11.Final

2.3.12.Final

2.3.13.Final

2.3.15.Final

2.3.17.Final

2.3.18.Final

2.3.19.Final

2.3.22.Final

2.3.23.Final

2.3.24.Final

2.3.25.Final

2.4.0.Alpha1

2.4.0.Beta1

2.4.0.Beta2

2.4.0.Beta3

2.4.0.Final

2.4.1.Final

2.4.2.Final

2.4.3.Final

2.4.4.Final

2.4.5.Final

2.4.6.Final

2.4.7.Final

2.4.8.Final

2.4.9.Final