CVE-2011-5245

The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity…

published November 23, 2012

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03213 · 88.0th percentile
Published
2012-11-23T20:00Z
EPSS history
Timeline
  • 23 NOV 20:00Z
    The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity…
    cvelistv5