GHSA-xrh2-c3rm-35jr

Suggest an improvement
Source
https://github.com/advisories/GHSA-xrh2-c3rm-35jr
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-xrh2-c3rm-35jr/GHSA-xrh2-c3rm-35jr.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-xrh2-c3rm-35jr
Aliases
  • CVE-2014-3599
Published
2022-05-24T22:01:08Z
Modified
2023-11-08T03:57:39.298826Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
Summary
HornetQ REST vulnerable to Improper Restriction of XML External Entity Reference
Details

HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy.

Database specific 
{
    "github_reviewed_at": "2022-11-22T18:45:47Z",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-611"
    ],
    "nvd_published_at": "2019-11-12T14:15:00Z",
    "severity": "MODERATE"
}
References

Affected packages

Maven / org.hornetq.rest:hornetq-rest

Package

Name
org.hornetq.rest:hornetq-rest
View open source insights on deps.dev
Purl
pkg:maven/org.hornetq.rest/hornetq-rest

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.5.0.Beta1

Affected versions

1.*
1.0-beta-1
1.0-beta-2
1.0-beta-3
2.*
2.2.2.Final
2.2.2.1
2.2.2.2
2.3.0.Alpha
2.3.0.BETA1
2.3.0.BETA2
2.3.0.BETA3
2.3.0.CR1
2.3.0.CR2
2.3.0.Final
2.3.1.Final
2.3.2.Final
2.3.3.Final
2.3.4.Final
2.3.5.Final
2.3.6.Final
2.3.7.Final
2.3.8.Final
2.3.9.Final
2.3.10.Final
2.3.11.Final
2.3.12.Final
2.3.13.Final
2.3.15.Final
2.3.17.Final
2.3.18.Final
2.3.19.Final
2.3.22.Final
2.3.23.Final
2.3.24.Final
2.3.25.Final
2.4.0.Alpha1
2.4.0.Beta1
2.4.0.Beta2
2.4.0.Beta3
2.4.0.Final
2.4.1.Final
2.4.2.Final
2.4.3.Final
2.4.4.Final
2.4.5.Final
2.4.6.Final
2.4.7.Final
2.4.8.Final
2.4.9.Final

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-xrh2-c3rm-35jr/GHSA-xrh2-c3rm-35jr.json"