CVE-2017-14949

Restlet Framework before 2.3.12 is affected by CVE-2017-14949, allowing remote attackers to access arbitrary files via a crafted REST API HTTP request that triggers an XXE attack. The vulnerability is linked to XML representations (XmlRepresentation, DOMRepresentation, SaxRepresentation) and Jack...

CVE-2017-14868

CVE-2017-14868 affects Restlet Framework before 2.3.11 when using SimpleXMLProvider, enabling an XXE in a REST API HTTP request that can disclose arbitrary files. The issue specifically impacts the Jax-rs extension and is described across multiple sources as a file disclosure via external entity ...

CVE-2017-14868

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension...

CVE-2017-14868: Improper Restriction of XML External Entity Reference

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension...

CVE-2017-14949: Improper Restriction of XML External Entity Reference

Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities not parameter external entities are properly considered. This is related to XmlRepresentation, DOMRepresentatio...

PT-2017-13736

Name of the Vulnerable Software and Affected Versions Restlet Framework versions prior to 2.3.11 Description The issue allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request, specifically when using SimpleXMLProvider with the Jax-rs extension. Recommendatio...

PT-2017-13773

Name of the Vulnerable Software and Affected Versions Restlet Framework versions prior to 2.3.12 Description The issue allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE XML External Entity attack. This is related to XmlRepresentation,...

Serviio PRO 1.8 DLNA Media Streaming Server REST API Information Disclosure

Summary Serviio is a free media server. It allows you to stream your media files music, video or images to renderer devices e.g. a TV set, Bluray player, games console or mobile phone on your connected home network. Description The version of Serviio installed on the remote Windows/Linux host is...

CVE-2014-1868

Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion XEE attack...

CVE-2014-1868

Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion XEE attack...

UBUNTU-CVE-2014-1868

Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion XEE attack...

CVE-2014-1868

Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion XEE attack...

CVE-2014-1868

The affected software is Restlet Framework, specifically version 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1. The root cause is processing XML with XMLRepresentation or XML serializers that allows an XML Entity Expansion (XEE) attack, leading to denial of service. No exploit details are provided....

CVE-2014-1868

Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion XEE attack...

PT-2014-4332

Name of the Vulnerable Software and Affected Versions Restlet Framework versions 2.1.x through 2.1.7 Restlet Framework versions 2.x.x through 2.2 RC1 Description The issue allows attackers to cause a denial of service via an XML Entity Expansion XEE attack when using XMLRepresentation or XML...

CVE-2014-1868: Undefined Security Weakness

Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion XEE attack...