Restlet : Security Vulnerabilities, CVEs, Published In 2013
The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221.
Max CVSS
7.5
EPSS Score
0.86%
Published
2013-10-10
Updated
2016-12-06
The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.
Max CVSS
7.5
EPSS Score
1.68%
Published
2013-10-10
Updated
2016-12-07
2 vulnerabilities found