CVE-2017-14949
1 advisory.
Maven/org.restlet.jse:org.restlet CVE-2017-14949: high 7.5
Restlet Framework allows remote attackers to access arbitrary files via a crafted REST API HTTP request
Action: Upgrade org.restlet.jse:org.restlet to 2.3.12 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.12 | - |
Fixed versions
| 2.3.12 |
Sources
- osv: GHSA-cvj4-g3gx-8vqq
- https://nvd.nist.gov/vuln/detail/CVE-2017-14949
- https://github.com/restlet/restlet-framework-java/commit/fe75aff3af23b879b984db7a2b6824cee0ef0fc5
- https://github.com/advisories/GHSA-cvj4-g3gx-8vqq
- https://github.com/restlet/restlet-framework-java
- https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements
- https://lgtm.com/blog/restlet_CVE-2017-14949
CVE-2017-14949 · published · modified · JSON