An unauthenticated remote file read vulnerability exists in multiple Red Hat products using RESTEasy, posing a significant risk of sensitive data exposure.

This is an XML External Entity (XXE) vulnerability occurring in the SourceProvider.writeTo method. An unauthenticated attacker can send a crafted XML body with a DOCTYPE declaration to endpoints accepting XML, forcing the server to resolve external entities and return file contents.

This vulnerability carries a CVSS score of 7.5, classifying it as High severity. Successful exploitation allows unauthorized parties to read sensitive configuration files or system data from the server, which can lead to further compromise, lateral movement, or unauthorized access to backend services.

Immediate Action: Monitor official Red Hat security advisories for the release of patched versions and apply updates as soon as they are made available.

Proactive Monitoring: Review application access logs for anomalous XML requests containing DOCTYPE declarations or unexpected external references.

Compensating Controls: Implement a Web Application Firewall (WAF) to inspect and block incoming XML payloads that contain malicious DOCTYPE definitions or external entity references.

Public Exploit Available: Unknown.

Given the High severity and the potential for direct sensitive data exfiltration, organizations should treat this vulnerability with urgency. Ensure that all affected Red Hat components are tracked in your vulnerability management system and apply vendor-supplied patches immediately upon release to prevent potential exploitation.