Restlet Arbitrary Java Code Execution via a serialized object

HOCH 7.5CVE-2013-4271 · GHSA-f3mv-g3xr-fp7w · Published 10/10/2013 · updated 16/06/2026

Kurz gesagt

CVE-2013-4271 ist eine Schwachstelle (HOCH (CVSS 7.5)) in org.restlet.jse:org.restlet, restlet (restlet).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 3.2%, höher als bei 88.2% aller Schwachstellen.
Abhilfe: auf 2.1.4 oder neuer aktualisieren.

Package	Affected versions	Patched versions
org.restlet.jse:org.restlet Maven	`< 2.1.4`	`2.1.4`
restlet restlet	`= 2.1= 2.1.0= 2.1.1= 2.1.2≤ 2.1.3`	No fix yet

Description

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2013-4271 · ADVISORY
restlet/restlet-framework-java · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
restlet/restlet-framework-java · PACKAGE
restlet.org/learn/2.1/changes · WEB
rhn.redhat.com/errata/RHSA-2013-1410.html · WEB
rhn.redhat.com/errata/RHSA-2013-1862.html · WEB

Weitere Schwachstellen in org.restlet.jse:org.restlet

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.restlet.jse:org.restlet

Maven

< 2.1.4

2.1.4

restlet

= 2.1= 2.1.0= 2.1.1= 2.1.2≤ 2.1.3

No fix yet

Description

NVD description

Weitere Schwachstellen in org.restlet.jse:org.restlet

Alle anzeigen →