Security Advisory

CVE-2014-1868

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-10-06 23:00:00
Last updated 2024-08-06 09:58:15
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.