What’s Vulnerable › Vulnerabilities

CVE-2012-0818

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-11-23 · updated 2026-06-16
• Weakness: CWE-200

Description

RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.

Affected products

• Red Hat, Inc. resteasy: through 2.3.0; 1.0.0, 1.0.1, 1.0.2, 1.1, 1.2, 2.0.0 (+6)

References

• http://rhn.redhat.com/errata/RHSA-2012-0441.html
• http://rhn.redhat.com/errata/RHSA-2012-0519.html
• http://rhn.redhat.com/errata/RHSA-2012-1056.html
• http://rhn.redhat.com/errata/RHSA-2012-1057.html
• http://rhn.redhat.com/errata/RHSA-2012-1058.html
• http://rhn.redhat.com/errata/RHSA-2012-1059.html
• http://rhn.redhat.com/errata/RHSA-2012-1125.html
• http://rhn.redhat.com/errata/RHSA-2014-0371.html
• http://rhn.redhat.com/errata/RHSA-2014-0372.html
• http://secunia.com/advisories/47818
• http://secunia.com/advisories/47832
• http://secunia.com/advisories/48697

Get alerted when CVE-2012-0818 or the next vulnerability affects your stack