CVE-2020-10688

A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack.

• CWE-79
• CWE-79

• https://bugzilla.redhat.com/show_bug.cgi?id=1814974Issue Tracking, Patch, Vendor Advisory
• https://github.com/quarkusio/quarkus/issues/7248Exploit, Issue Tracking, Third Party Advisory
• https://issues.redhat.com/browse/RESTEASY-2519Issue Tracking, Permissions Required, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20210706-0008/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1814974Issue Tracking, Patch, Vendor Advisory
• https://github.com/quarkusio/quarkus/issues/7248Exploit, Issue Tracking, Third Party Advisory
• https://issues.redhat.com/browse/RESTEASY-2519Issue Tracking, Permissions Required, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20210706-0008/Third Party Advisory

Published

May 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10682The Filemanager in CMS Made Simple 2.2.13 allows remote code…7.8
• CVE-2020-10683dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DT…9.8
• CVE-2020-10684A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.…7.1
• CVE-2020-10685A flaw was found in Ansible Engine affecting Ansible Engine …5.5
• CVE-2020-10686A flaw was found in Keycloak version 8.0.2 and 9.0.0, and wa…4.7
• CVE-2020-10687A flaw was discovered in all versions of Undertow before Und…4.8
• CVE-2020-10689A flaw was found in the Eclipse Che up to version 7.8.x, whe…6.8
• CVE-2020-1069A remote code execution vulnerability exists in Microsoft Sh…8.8
• CVE-2020-10690There is a use-after-free in kernel versions before 5.5 due …6.4
• CVE-2020-10691An archive traversal flaw was found in all ansible-engine ve…5.2
• CVE-2020-10692Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10693A flaw was found in Hibernate Validator version 6.1.2.Final.…5.3