restlet/restlet-framework-java · Security
Moderate severity vulnerability that affects org.restlet.jse:org.restlet
- GHSA ID
- GHSA-73cq-fhp3-8rpw
- CVE ID
- CVE-2014-1868
- Severity
- medium
- Published
- Updated
Description
Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.
CWEs
- CWE-776 · Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')