GHSA-73cq-fhp3-8rpwMedium

Moderate severity vulnerability that affects org.restlet.jse:org.restlet

Published
October 17, 2018
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2014-1868 →

📋 Description

Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.

🎯 Affected products1

  • maven/org.restlet.jse:org.restlet:>= 2.1.0, < 2.1.7

🔗 References (5)