CVE-2016-9606CWE-20

CVE-2016-9606: vulnerability in Red Hat, Inc. RESTEasy

Published · Updated

Follow this CVE+ Monitor resteasy+ Monitor resteasy3.0

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 6.0%
JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions.
Affected products
Red Hat, Inc. · RESTEasy