Security Advisory

CVE-2011-5245

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-11-23 20:00:00

Last updated 2024-08-07 00:30:46

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818.

← Browse all CVEs View on cve.org ↗