CVE-2017-7561 - AskarLabs CVE Database

CVE-2017-7561

Vendor Red Hat, Inc.

Product resteasy

Weakness CWE-346 · Origin validation

Published September 13, 2017

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.

Key dates

02Disclosure timeline

September 13, 2017 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-7561 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/346.html

Related vulnerabilities

04Related CVE

CVE-2026-34720 Zammad has an origin validation error in SSO mechanism CVE-2026-9595 webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies CVE-2026-45021 Kuma: Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdmin CVE-2018-10591 CVE-2025-23023 Anonymous cache poisoning via request headers in Discourse