Description
Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.
Remediation
References
http://secunia.com/advisories/56940
https://exchange.xforce.ibmcloud.com/vulnerabilities/91181
https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements
Related Vulnerabilities
CVE-2021-3820 Vulnerability in npm package i
CVE-2020-15256 Vulnerability in npm package object-path-set
CVE-2006-1548 Vulnerability in maven package struts:struts
CVE-2022-23505 Vulnerability in npm package passport-wsfed-saml2
CVE-2023-47320 Vulnerability in maven package org.silverpeas.core:silverpeas-core-web