{"action":"Upgrade org.restlet.jse:org.restlet to 2.1.4 or later.","affected":[{"fixed":"2.1.4","introduced":"0"}],"component":"org.restlet.jse:org.restlet","cve_ids":["CVE-2013-4221"],"ecosystem":"Maven","epss":0.03434,"exploited":false,"fixed_versions":["2.1.4"],"ghsa_id":"GHSA-92j2-5r7p-6hjw","id":"tcs_01M5N8NTV1WCQYA2FQ6112KHJC","modified_at":"2024-03-05T17:30:03Z","published_at":"2022-05-17T03:28:12Z","references":["https://osv.dev/vulnerability/GHSA-92j2-5r7p-6hjw","https://nvd.nist.gov/vuln/detail/CVE-2013-4221","https://github.com/restlet/restlet-framework-java/issues/774","https://github.com/restlet/restlet-framework-java/commit/b85c2ef182c69c5e2e21df008ccb249ccf80c7b","https://bugzilla.redhat.com/show_bug.cgi?id=995275","https://github.com/restlet/restlet-framework-java","http://blog.diniscruz.com/2013/08/using-xmldecoder-to-execute-server-side.html","http://restlet.org/learn/2.1/changes","http://rhn.redhat.com/errata/RHSA-2013-1410.html","http://rhn.redhat.com/errata/RHSA-2013-1862.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-92j2-5r7p-6hjw","url":"https://osv.dev/vulnerability/GHSA-92j2-5r7p-6hjw"}],"summary":"Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML"}