| Package | Affected versions | Patched versions |
|---|---|---|
| org.restlet.jse:org.restlet | ≥ 2.1.0, < 2.1.7 | 2.1.7 |
| restlet framework | = 2.1.0= 2.1.1= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.1.6= 2.2≤ 2.2 |
Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free