Restlet Framework Improper Restriction of XML External Entity Reference Vulnerability - CVE-2017-14868 - Vulnerability Database

Restlet Framework Improper Restriction of XML External Entity Reference Vulnerability - CVE-2017-14868

High

Reference: CVE-2017-14868

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-14868

Title: Restlet Framework Improper Restriction of XML External Entity Reference Vulnerability

Overview:

Restlet Framework before 2.3.11 when using SimpleXMLProvider allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension.