Lucene search

K
cvelistMitreCVELIST:CVE-2011-5245
HistoryNov 23, 2012 - 8:00 p.m.

CVE-2011-5245

2012-11-2320:00:00
mitre
www.cve.org
7

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

72.8%

The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818.

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

72.8%