{
  "cveId": "CVE-2021-20289",
  "url": "https://patchblox.com/security/cve/CVE-2021-20289",
  "summary": "CVE-2021-20289 is fixed in 2 products on 1 platform, first by libresteasy-java 3.6.2-2ubuntu0.20.04.1~esm1, released October 8, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libresteasy-java: A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final.The endpoint class and method names are re...",
  "description": "A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final.The endpoint class and method names are returned as part of the exceptionresponse when RESTEasy cannot convert one of the request URI path or queryvalues to the matching JAX-RS resource method\u0027s parameter value. Thehighest threat from this vulnerability is to data confidentiality.",
  "published": "2021-03-26T10:15:00Z",
  "severity": "Low",
  "epss": 0.014,
  "epssPercentile": 0.72673,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.6.2-2ubuntu0.20.04.1~esm1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.20.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libresteasy-java-3.6.2-2ubuntu0.20.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.6.2-2ubuntu0.22.04.1~esm1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.22.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libresteasy-java-3.6.2-2ubuntu0.22.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.6.2-2ubuntu0.24.04.1~esm1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.24.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libresteasy-java-3.6.2-2ubuntu0.24.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "3.6.2-2ubuntu0.24.10.1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.24.10.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libresteasy-java-3.6.2-2ubuntu0.24.10.1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "3.6.2-3ubuntu0.25.04.1",
      "fix": "libresteasy-java 3.6.2-3ubuntu0.25.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libresteasy-java-3.6.2-3ubuntu0.25.04.1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.0.26-1~18.04.1~esm1",
      "fix": "libresteasy3.0-java 3.0.26-1~18.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libresteasy3.0-java-3.0.26-1-18.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.0.26-1ubuntu0.1~esm1",
      "fix": "libresteasy3.0-java 3.0.26-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libresteasy3.0-java-3.0.26-1ubuntu0.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.0.26-3ubuntu0.1",
      "fix": "libresteasy3.0-java 3.0.26-3ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libresteasy3.0-java-3.0.26-3ubuntu0.1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.0.26-6ubuntu0.24.04.1",
      "fix": "libresteasy3.0-java 3.0.26-6ubuntu0.24.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libresteasy3.0-java-3.0.26-6ubuntu0.24.04.1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "3.0.26-6ubuntu0.24.10.1",
      "fix": "libresteasy3.0-java 3.0.26-6ubuntu0.24.10.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libresteasy3.0-java-3.0.26-6ubuntu0.24.10.1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "3.0.26-6ubuntu0.25.04.1",
      "fix": "libresteasy3.0-java 3.0.26-6ubuntu0.25.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libresteasy3.0-java-3.0.26-6ubuntu0.25.04.1",
      "released": "2026-01-16T01:42:24Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}