https://bugzilla.redhat.com/show_bug.cgi?id=1942819
--- Doc Text *updated* by RaTasha Tillery-Smith <rtillery(a)redhat.com> ---
A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of
RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling
@javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to
launch a reflected XSS attack. The highest threat from this vulnerability is to data
confidentiality and integrity.
--
You are receiving this mail because:
You are on the CC list for the bug.