Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2013-4221

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-92j2-5r7p-6hjw

Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.

gitlab/maven/org.restlet.jse/org.restlet/CVE-2013-4221

XML Injection (aka Blind XPath Injection) The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.