Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-92J2-5R7P-6HJW
HistoryMay 17, 2022 - 3:28 a.m.

Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML

2022-05-1703:28:12
CWE-91
GitHub Advisory Database
github.com
12

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.8%

JSON

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.

Affected configurations

Vulners
Node
org.restlet.jse\Matchorg.restlet
CPENameOperatorVersion
org.restlet.jse:org.restletlt2.1.4

Related

cve 2
ubuntucve 2
nvd 2
prion 2
osv 2
veracode 2
cvelist 2
github 1
redhat 2
avleonov 1
cve
cve
CVE-2013-4221
2013-10-10 00:55:14
CVE-2013-4271
2013-10-10 00:55:14
ubuntucve
ubuntucve
CVE-2013-4221
2013-10-10 00:00:00
CVE-2013-4271
2013-10-10 00:00:00
nvd
nvd
CVE-2013-4221
2013-10-10 00:55:14
CVE-2013-4271
2013-10-10 00:55:14
prion
prion
Default configuration
2013-10-10 00:55:00
Default configuration
2013-10-10 00:55:00
osv
osv
Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML
2022-05-17 03:28:12
Restlet Arbitrary Java Code Execution via a serialized object
2022-05-17 03:28:57
veracode
veracode
Arbitrary Code Execution
2019-07-12 06:19:18
Arbitrary Code Execution
2019-07-12 06:19:18
cvelist
cvelist
CVE-2013-4221
2013-10-10 00:00:00
CVE-2013-4271
2013-10-10 00:00:00
github
github
Restlet Arbitrary Java Code Execution via a serialized object
2022-05-17 03:28:57
redhat
redhat
(RHSA-2013:1410) Important: Red Hat JBoss Fuse/A-MQ 6.0.0 patch 4
2013-10-07 00:00:00
(RHSA-2013:1862) Important: Fuse ESB Enterprise/Fuse MQ Enterprise 7.1.0 update
2013-12-19 00:00:00
avleonov
avleonov
CWEs in NVD CVE feed: analysis and complaints
2017-10-21 14:10:30

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.8%

JSON
Related for GHSA-92J2-5R7P-6HJW
cve2ubuntucve2nvd2prion2osv2veracode2cvelist2github1redhat2avleonov1