https://bugzilla.redhat.com/show_bug.cgi?id=1378613
--- Doc Text *updated* by Martin Prpic <mprpic(a)redhat.com> ---
It was discovered that under certain conditions RESTEasy could be forced to parse a
request with SerializableProvider, resulting in deserialization of potentially untrusted
data. An attacker could possibly use this flaw execute arbitrary code with the permissions
of the application using RESTEasy.
--
You are receiving this mail because:
You are on the CC list for the bug.