Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2018/10/17 12:4 a.m.31 views

Restlet Framework Ja-rs extension is vulnerable to XXE when using SimpleXMLProvider

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension...

7.5CVSS7.3AI score0.0038EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2018/10/17 12:4 a.m.29 views

GHSA-2MP8-QVQM-3XWQ Restlet Framework Ja-rs extension is vulnerable to XXE when using SimpleXMLProvider

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension...

7.5CVSS7.5AI score0.0038EPSS
Exploits0References6
Prion
Prion
added 2017/11/30 6:29 p.m.19 views

Design/Logic Flaw

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension...

5CVSS7.5AI score0.0038EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2017/11/30 6:29 p.m.14 views

UBUNTU-CVE-2017-14868

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension...

7.5CVSS7.3AI score0.0038EPSS
Exploits0References2
OSV
OSV
added 2017/11/30 6:29 p.m.12 views

CVE-2017-14868

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension...

7.5CVSS7AI score0.0038EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2017/11/30 6:29 p.m.18 views

CVE-2017-14868

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension...

7.5CVSS7.2AI score0.0038EPSS
Exploits0References1
Rows per page
Query Builder