CVE-2014-7839
redhat resteasy: no CVSS score yet. EPSS 2.0% chance of exploitation in the next 30 days. Fixed in org.jboss.resteasy:resteasy-jaxrs 3.0.11.Final.
DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.
- EPSS
- 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:resteasy
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-pc54-pchm-xcw6 | Maven | org.jboss.resteasy:resteasy-jaxrs | <3.0.11.Final | 3.0.11.Final |