CVE-2016-9606CWE-20

JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which…

published March 9, 2018

CVSS
—
EPSS
6%
Percentile
93.2
In the wild
Unconfirmed
What it is

JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05970 · 93.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-03-09T20:00Z
EPSS history
Timeline
  • 09 MAR 20:00Z
    JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which…
    cvelistv5