CVE-2016-9606 PUBLISHED

JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions.

EPSS 2.26% · 84.5th percentile

Risk Scores

EPSS Score
2.26%
84.5th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSresteasy0, 3.0.6-3, 3.0.6-3ubuntu0.1~esm1

Timeline

References

Open in Interactive Console →