NetSight
IP …
medium6.4

CVE-2014-7839

DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows rem…

Impact

DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.

Affected products

VendorProductAffected versions
RedhatResteasy
Versions 2.3.7, 3.0.9

Weakness classification

CWE-20

References