CVE-2020-1695 HIGH

CVE-2020-1695

Vendor Red Hat
Product resteasy
Weakness CWE-20 · Input validation
Published May 19, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed.

Key dates

02Disclosure timeline

May 19, 2020 CVE published
August 4, 2024 Record updated