medium6.1
CVE-2016-6348
JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attack
Impact
JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jboss.resteasy:resteasy-client | < 3.0.20.Final | 3.0.20.Final |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Resteasy | All versions |