High severity7.5NVD Advisory· Published Sep 13, 2017· Updated May 13, 2026
CVE-2017-7561
CVE-2017-7561
Description
Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jboss.resteasy:resteasy-jaxrsMaven | >= 3.0.7.Final, < 3.0.25.Final | 3.0.25.Final |
org.jboss.resteasy:resteasy-jaxrsMaven | >= 3.1.4.Final, < 3.5.0.CR1 | 3.5.0.CR1 |
Affected products
15cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.0.7:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.2.13:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:3.5.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
12- issues.jboss.org/browse/RESTEASY-1704nvdPatchVendor AdvisoryWEB
- www.securityfocus.com/bid/100465nvdThird Party AdvisoryVDB Entry
- github.com/advisories/GHSA-57q5-x8jf-g7h8ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-7561ghsaADVISORY
- access.redhat.com/errata/RHSA-2018:0002nvdWEB
- access.redhat.com/errata/RHSA-2018:0003nvdWEB
- access.redhat.com/errata/RHSA-2018:0004nvdWEB
- access.redhat.com/errata/RHSA-2018:0005nvdWEB
- access.redhat.com/errata/RHSA-2018:0478nvdWEB
- access.redhat.com/errata/RHSA-2018:0479nvdWEB
- access.redhat.com/errata/RHSA-2018:0480nvdWEB
- access.redhat.com/errata/RHSA-2018:0481nvdWEB
News mentions
0No linked articles in our index yet.