Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.restlet.jse:org.restlet

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
Maven Central

Advisories 4

  • Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE…

    Affected: fixed in 2.3.12.

  • Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause…

    Affected: from 2.1.0, fixed in 2.1.7.

  • The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which…

    Affected: fixed in 2.1.4.

  • The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the…

    Affected: fixed in 2.1.4.