SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

CVE-2017-14868 -- librestlet-java

ID: oval:org.secpod.oval:def:1901939	Date: (C)2019-05-07 (M)2023-12-20
Class: VULNERABILITY	Family: unix

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension.

Platform:

Ubuntu 16.04

Ubuntu 18.10

Ubuntu 18.04

Product:

librestlet-java

Reference:

CVE-2017-14868


30479



423868



248364



909



195388



282