Description
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed.
Published: 2020-05-19
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-2700 A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed.
Github GHSA Github GHSA GHSA-63cq-ppq8-cw6g Improper Input Validation in RESTEasy
Ubuntu USN Ubuntu USN USN-7351-1 RESTEasy vulnerabilities
Ubuntu USN Ubuntu USN USN-7630-1 RESTEasy vulnerabilities
History

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00393}

epss

{'score': 0.00386}


Sat, 12 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00224}

epss

{'score': 0.00393}


Subscriptions

Fedoraproject Fedora
Redhat Enterprise Linux Jboss Data Grid Jboss Enterprise Application Platform Jboss Enterprise Application Platform Cd Jboss Fuse Jboss Single Sign On Openshift Application Runtimes Resteasy
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-04T06:46:29.740Z

Reserved: 2019-11-27T00:00:00.000Z

Link: CVE-2020-1695

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-05-19T15:15:11.797

Modified: 2024-11-21T05:11:11.257

Link: CVE-2020-1695

cve-icon Redhat

Severity : Moderate

Publid Date: 2020-04-15T00:00:00Z

Links: CVE-2020-1695 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses