Description

The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221.

Remediation

References

CVE-2013-4271

Related Vulnerabilities

WordPress Plugin Page Showcaser Boxes Cross-Site Scripting (1.1)

ownCloud Improper Input Validation Vulnerability (CVE-2014-2585)

ReviveAdserver Session Fixation Vulnerability (CVE-2016-9125)

WordPress Plugin Simple Matted Thumbnails Cross-Site Scripting (1.01)

WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.18)

Severity

High

Classification

CVE-2013-4271 CWE-502

Tags

Missing Update Known Vulnerabilities