Description

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.

Remediation

References

http://blog.diniscruz.com/2013/08/using-xmldecoder-to-execute-server-side.html

http://restlet.org/learn/2.1/changes

http://rhn.redhat.com/errata/RHSA-2013-1410.html

https://github.com/restlet/restlet-framework-java/issues/774

https://bugzilla.redhat.com/show_bug.cgi?id=995275

http://rhn.redhat.com/errata/RHSA-2013-1862.html

Related Vulnerabilities

CVE-2021-23451 Vulnerability in npm package otp-generator

CVE-2021-45046 Vulnerability in maven package org.apache.logging.log4j:log4j-core

CVE-2023-20873 Vulnerability in maven package org.springframework.boot:spring-boot-actuator-autoconfigure

CVE-2019-0199 Vulnerability in maven package org.apache.tomcat:tomcat-coyote

CVE-2020-17521 Vulnerability in maven package org.codehaus.groovy:groovy

Severity

Critical

Classification

CWE-16

Tags

Third Party Advisory Release Notes Vendor Advisory Patch Issue Tracking