CVE-2014-1868
Published Oct 6, 2014
Last updated 7 years ago
Overview
- Description
- Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Evaluator
- Comment
- <a href="http://cwe.mitre.org/data/definitions/611.html" target="_blank">CWE-611: Improper Restriction of XML External Entity Reference ('XXE')</a>
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:*:milestone6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29BFF988-412E-4B36-B490-4B01FDD76CCD",
"versionEndIncluding": "2.2"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F575D822-18AF-46F0-AAEE-0EECF2FE079E"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D366896-198C-4BDA-91B0-362573487DEE"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B96DF18-10EF-4381-A673-9E543D8C49C9"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8461A18-F2AA-45CB-A65A-E523F8DAD759"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DB26641-39C8-4283-88FE-E8AB06821A26"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6851ABDC-A4B8-4C3F-B490-F988090F172A"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54D7033F-F04F-488B-8217-36C283BF9040"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.2:milestone1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29B3AC0C-92EE-461E-A23D-3D16BFA0231A"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.2:milestone2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85459E1F-45CA-4737-B8D7-B2AC25287700"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.2:milestone3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D134573-C054-4322-AD81-10BADDA85C7F"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.2:milestone4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D39ED88D-5075-499E-B18D-977FE51384DA"
},
{
"criteria": "cpe:2.3:a:restlet:restlet_framework:2.2:milestone5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "429516CE-E007-42AE-8160-4F0601500147"
}
],
"operator": "OR"
}
]
}
]