https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 06:51:31 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-38241 cnvd-2017-38241 https://cve.radiocsirt.org/vuln/cnvd-2017-38241 https://cve.radiocsirt.org/vuln/euvd-2026-78407 EUVD-2026-78407 https://cve.radiocsirt.org/vuln/euvd-2026-78407 https://cve.radiocsirt.org/vuln/fkie_cve-2017-14949 <p>Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not parameter external entities) are properly considered. This is related to XmlRepresentation, DOMRepresentation, SaxRepresentation, and JacksonRepresentation.</p> <p>Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not parameter external entities) are properly considered. This is related to XmlRepresentation, DOMRepresentation, SaxRepresentation, and JacksonRepresentation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-14949 https://cve.radiocsirt.org/vuln/ghsa-cvj4-g3gx-8vqq <p><strong>Affected:</strong> Maven: org.restlet.jse:org.restlet</p> <p>Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not parameter external entities) are properly considered. This is related to XmlRepresentation, DOMRepresentation, SaxRepresentation, and JacksonRepresentation.</p> <p><strong>Affected:</strong> Maven: org.restlet.jse:org.restlet</p> <p>Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not parameter external entities) are properly considered. This is related to XmlRepresentation, DOMRepresentation, SaxRepresentation, and JacksonRepresentation.</p> https://cve.radiocsirt.org/vuln/ghsa-cvj4-g3gx-8vqq https://cve.radiocsirt.org/vuln/gsd-2017-14949 gsd-2017-14949 https://cve.radiocsirt.org/vuln/gsd-2017-14949 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-14949 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: restlet, Ubuntu:18.04:LTS: restlet</p> <p>Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not parameter external entities) are properly considered. This is related to XmlRepresentation, DOMRepresentation, SaxRepresentation, and JacksonRepresentation.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: restlet, Ubuntu:18.04:LTS: restlet</p> <p>Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not parameter external entities) are properly considered. This is related to XmlRepresentation, DOMRepresentation, SaxRepresentation, and JacksonRepresentation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-14949