---
cve: 2011-5245
title: RESTEasy: XML eXternal Entity (XXE) flaw
description: >
    RESTEasy permits XXE (XML eXternal Entity) attacks. If a RESTEasy endpoint is
    deployed, a user can submit a request containing an external XML entity. This
    XML entity will be resolved, allowing a remote attacker to read files in the 
    context of the user running the application server. This flaw affects DOM 
    Document, JAXB and Fast Infoset (FI) input.
cvss_v2: 5.0
references:
    - https://issues.jboss.org/browse/RESTEASY-637
    - https://access.redhat.com/security/cve/CVE-2011-5245
affected:
    - groupId: org.jboss.resteasy 
      artifactId: resteasy-jaxb-provider
      version:
        - "<=2.2.2.GA"
      fixedin:
        - ">=2.3.1"

---
cve: 2011-5245
title: "RESTEasy: XML eXternal Entity (XXE) flaw"
description: >
    RESTEasy permits XXE (XML eXternal Entity) attacks. If a RESTEasy endpoint is
    deployed, a user can submit a request containing an external XML entity. This
    XML entity will be resolved, allowing a remote attacker to read files in the 
    context of the user running the application server. This flaw affects DOM 
    Document, JAXB and Fast Infoset (FI) input.
cvss_v2: 5.0
references:
    - https://issues.jboss.org/browse/RESTEASY-637
    - https://access.redhat.com/security/cve/CVE-2011-5245
affected:
    - groupId: org.jboss.resteasy 
      artifactId: resteasy-jaxb-provider
      version:
        - "<=2.2.2.GA"
      fixedin:
        - ">=2.3.1"

Fix title error in yaml sample
Fix title error in yaml sample
