GitHub Advisoryadvisory · Maven

GHSA-73cq-fhp3-8rpw Moderate severity vulnerability that affects org.restlet.jse:org.restlet

MEDIUM Published 2018-10-17 Modified 2021-09-02 Official page ↗
Aliases
CVE-2014-1868
Ecosystem
Maven
Packages
org.restlet.jse:org.restlet
Severity
Moderate
Weaknesses
CWE-776
Reviewed
2020-06-16

Affected packages

• Maven org.restlet.jse:org.restlet: >= 2.1.0, < 2.1.7 → fixed in 2.1.7

Description

Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.

Related

Alias · CVE (1)

  • CVE-2014-1868 Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a… vulnerability

Weakness · CWE (1)

  • CWE-776 Improper Restriction of Recursive Entity References in DTDs weakness

References