Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack. <a href"http://cwe.mitre.org/data/definitions/611.html" target"_blank">CWE-611: Improper Restriction of XML External Entity Reference ('XXE')</a>
Publication date: Tue, 07 Oct 2014 04:55:00 +0000