exploitDog - Комплексное решение для обнаружения, оценки и устранения уязвимостей.

БДУ ФСТЭК

Microsoft MSRC

NVD

Oracle ELSA

Red Hat CVE

РЕД ОС

Rocky RLSA

SUSE CVRF

Ubuntu

Debian

Github

Количество 5

CVE-2017-14868

около 8 лет назад

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension.

CVSS3: 7.5

EPSS: Низкий

CVE-2017-14868

больше 8 лет назад

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension.

CVSS3: 7.5

EPSS: Низкий

CVE-2017-14868

около 8 лет назад

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension.

CVSS3: 7.5

EPSS: Низкий

CVE-2017-14868

около 8 лет назад

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows ...

CVSS3: 7.5

EPSS: Низкий

GHSA-2mp8-qvqm-3xwq

больше 7 лет назад

Restlet Framework Ja-rs extension is vulnerable to XXE when using SimpleXMLProvider

CVSS3: 7.5

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано
CVE-2017-14868 Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension.	CVSS3: 7.5	0% Низкий	около 8 лет назад
CVE-2017-14868 Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension.	CVSS3: 7.5	0% Низкий	больше 8 лет назад
CVE-2017-14868 Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension.	CVSS3: 7.5	0% Низкий	около 8 лет назад
CVE-2017-14868 Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows ...	CVSS3: 7.5	0% Низкий	около 8 лет назад
GHSA-2mp8-qvqm-3xwq Restlet Framework Ja-rs extension is vulnerable to XXE when using SimpleXMLProvider	CVSS3: 7.5	0% Низкий	больше 7 лет назад

Уязвимостей на страницу