CVE-2011-5245
Published Nov 23, 2012
Last updated 7 years ago
Overview
- Description
- The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:resteasy:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "044CA736-E165-476F-B9AF-1179A578FE8D",
"versionEndIncluding": "2.3.1"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02480F00-302E-49DA-9FF3-41DC8A5A5E39"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59E0CE57-59C4-485C-87DB-CD5E3EDFBFC6"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D332D87E-6270-4DC6-8EC2-8053890DA545"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0A15B5C-0538-4C1E-99FC-E4620D4157BD"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC38C8FE-62D3-4FC6-8BF0-6437A1FC9F26"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B945333E-1B4E-4B60-B060-1186B8AC2527"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F75F5EC0-639A-40D3-871D-1FA38BF1A37E"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22F557EA-05E8-4773-BB81-C0EBFE89C61F"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EB842B8-6D95-484F-AE07-9C97BFD161D8"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC3D6E8C-E691-404C-9647-3ABFBF66FCDD"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:2.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "715FCD38-C218-45AB-824A-0EA7908BA951"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:2.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45635C9A-7AA2-42E0-95CC-C1DEC0AF60BC"
},
{
"criteria": "cpe:2.3:a:redhat:resteasy:2.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F0BAABB-B49A-4FDC-BD2E-C9C2E9560649"
}
],
"operator": "OR"
}
]
}
]