CVE-2014-1868 | BDVDB-2026-64674 Detail

Description#

Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/56940
https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements
https://exchange.xforce.ibmcloud.com/vulnerabilities/91181

Exploit#

No public exploit known

History#

Version 12014-10-06Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.