UBUNTU-CVE-2016-6347

Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

Affected packages

Ubuntu:Pro:16.04:LTS / resteasy

Package

Name: resteasy
Purl: pkg:deb/ubuntu/resteasy@3.0.6-3ubuntu0.1~esm1?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.0.6-3ubuntu0.1~esm1

Affected versions

3.*

3.0.6-3

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "3.0.6-3ubuntu0.1~esm1",
            "binary_name": "libresteasy-java"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}