Threats tagged 'ghsa-q934-x6mh-3877'

A vulnerability in RESTEasy's default exception mapper causes it to return the localized message of unhandled exceptions (other than WebApplicationException) in HTTP 500 responses. This can leak potentially sensitive information to remote unauthenticated attackers who can trigger such exceptions. The issue was confirmed in RESTEasy version 7.0.2.Final.