CVE-2020-10688 - AskarLabs CVE Database

CVE-2020-10688

Vendor N/A

Product RESTEasy

Weakness CWE-79 · XSS

Published May 27, 2021

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack.

Key dates

02Disclosure timeline

May 27, 2021 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-10688 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2019-25148 WP HTML Mail < 2.9.1 - HTML Injection CVE-2024-51670 WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability CVE-2025-11824 Cinza Grid <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Skin Content Field CVE-2021-44176 Adobe Experience Manager Stored XSS in workflow Stages parameter CVE-2025-46890 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)