{"id":"CVE-2012-0818","aliases":[],"url":"https://o3.security/vulnerability/CVE-2012-0818","summary":"Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy","details":"RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.","published":"2022-05-17T01:49:58Z","modified":"2024-12-03T06:03:01.875838Z","cvss":null,"epss":{"score":0.03213,"percentile":0.87574,"asOf":"2026-09-17"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"org.jboss.resteasy:resteasy-client","fixedVersion":"2.3.1"}],"fix":{"url":"https://github.com/resteasy/resteasy/commit/71ace879cf92d323bfa4d3e88db0c3059109bbf6","label":"resteasy/resteasy@71ace87"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0818"},{"type":"WEB","url":"https://github.com/resteasy/resteasy/commit/71ace879cf92d323bfa4d3e88db0c3059109bbf6"},{"type":"WEB","url":"https://web.archive.org/web/20200229045254/https://www.securityfocus.com/bid/51766"},{"type":"WEB","url":"https://web.archive.org/web/20200229044434/http://www.securityfocus.com/bid/51748"},{"type":"WEB","url":"https://issues.jboss.org/browse/RESTEASY-637"},{"type":"PACKAGE","url":"https://github.com/resteasy/Resteasy"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72808"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=785631"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2012-0818"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2014:0372"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2014:0371"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2013:1263"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2012:1125"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2012:1059"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2012:1058"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2012:1057"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2012:1056"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2012:0519"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2012:0441"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2012:0421"},{"type":"WEB","url":"http://rhn.redhat.com/errata/RHSA-2012-0441.html"},{"type":"WEB","url":"http://rhn.redhat.com/errata/RHSA-2012-0519.html"},{"type":"WEB","url":"http://rhn.redhat.com/errata/RHSA-2012-1056.html"},{"type":"WEB","url":"http://rhn.redhat.com/errata/RHSA-2012-1057.html"},{"type":"WEB","url":"http://rhn.redhat.com/errata/RHSA-2012-1058.html"},{"type":"WEB","url":"http://rhn.redhat.com/errata/RHSA-2012-1059.html"},{"type":"WEB","url":"http://rhn.redhat.com/errata/RHSA-2012-1125.html"},{"type":"WEB","url":"http://rhn.redhat.com/errata/RHSA-2014-0371.html"},{"type":"WEB","url":"http://rhn.redhat.com/errata/RHSA-2014-0372.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-12-03T06:03:01.875838Z"}}