cve.bz

CVE-2017-7561

7.5 highEPSS 1.4%

High (7.5) in redhat jboss enterprise application platform. EPSS 1.4% chance of exploitation in the next 30 days. Fixed in org.jboss.resteasy:resteasy-jaxrs 3.0.25.Final, 3.5.0.CR1.

Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.

Severity

CVSS 3.0

7.5 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWEs
CWE-444, CWE-346
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-57q5-x8jf-g7h8Mavenorg.jboss.resteasy:resteasy-jaxrs>=3.0.7.Final <3.0.25.Final3.0.25.Final
GHSA-57q5-x8jf-g7h8Mavenorg.jboss.resteasy:resteasy-jaxrs>=3.1.4.Final <3.5.0.CR13.5.0.CR1

References

Check your stackJSON