Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.jboss.resteasy:resteasy-jaxrs(Maven) | 3.0.7.Final | 3.0.25.Final | N/A |
| org.jboss.resteasy:resteasy-jaxrs(Maven) | 3.1.4.Final | 3.5.0.CR1 | N/A |
CVSS Metrics
