PT-2019-7096

CVE-2014-3599

Published

2019-11-12

Updated

2022-05-24

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HornetQ REST (affected versions not specified)

Description The issue is related to an insecure configuration of RestEasy, which makes HornetQ REST vulnerable to XML External Entity attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-XRH2-C3RM-35JR

Found an issue in the description? Have something to add? Feel free to write us 👾