{
  "cveId": "CVE-2020-10688",
  "url": "https://patchblox.com/security/cve/CVE-2020-10688",
  "summary": "CVE-2020-10688 is fixed in 2 products on 1 platform, first by libresteasy-java 3.6.2-2ubuntu0.20.04.1~esm1, released October 8, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libresteasy-java: A cross-site scripting (XSS) flaw was found in RESTEasy in versions before3.11.1.Final and before 4.5.3.Final, where...",
  "description": "A cross-site scripting (XSS) flaw was found in RESTEasy in versions before3.11.1.Final and before 4.5.3.Final, where it did not properly handle URLencoding when the RESTEASY003870 exception occurs. An attacker could usethis flaw to launch a reflected XSS attack.",
  "published": "2021-05-27T12:15:00Z",
  "severity": "Medium",
  "epss": 0.01388,
  "epssPercentile": 0.72419,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.6.2-2ubuntu0.20.04.1~esm1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.20.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libresteasy-java-3.6.2-2ubuntu0.20.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.6.2-2ubuntu0.22.04.1~esm1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.22.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libresteasy-java-3.6.2-2ubuntu0.22.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.6.2-2ubuntu0.24.04.1~esm1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.24.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libresteasy-java-3.6.2-2ubuntu0.24.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "3.6.2-2ubuntu0.24.10.1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.24.10.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libresteasy-java-3.6.2-2ubuntu0.24.10.1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "3.6.2-3ubuntu0.25.04.1",
      "fix": "libresteasy-java 3.6.2-3ubuntu0.25.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libresteasy-java-3.6.2-3ubuntu0.25.04.1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.0.26-1~18.04.1~esm1",
      "fix": "libresteasy3.0-java 3.0.26-1~18.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libresteasy3.0-java-3.0.26-1-18.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.0.26-1ubuntu0.1~esm1",
      "fix": "libresteasy3.0-java 3.0.26-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libresteasy3.0-java-3.0.26-1ubuntu0.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.0.26-3ubuntu0.1",
      "fix": "libresteasy3.0-java 3.0.26-3ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libresteasy3.0-java-3.0.26-3ubuntu0.1",
      "released": "2024-10-08T10:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}