Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2013-4271

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-f3mv-g3xr-fp7w

Restlet Arbitrary Java Code Execution via a serialized object The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221.

gitlab/maven/org.restlet.jse/org.restlet/CVE-2013-4271

Deserialization of Untrusted Data The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221.