CVE-2014-1868
restlet restlet framework: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in org.restlet.jse:org.restlet 2.1.7.
Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- restlet:restlet_framework
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-73cq-fhp3-8rpw | Maven | org.restlet.jse:org.restlet | >=2.1.0 <2.1.7 | 2.1.7 |