restlet vulnerabilities and fixes

Recent CVEs affecting restlet, with upgrade or downgrade steps. 3 tracked.

restlet has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2020-02-19. Highest priority: CVE-2014-2228 (score 66/100).

• CVE-2017-14949 HIGH 7.5 UPGRADE Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP
• CVE-2017-14868 HIGH 7.5 UPGRADE Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary fil
• CVE-2014-2228 CRITICAL 9.8 UPGRADE The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via u

FAQ

How do I fix restlet vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is restlet being exploited right now?

None of the tracked restlet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which restlet CVE should I patch first?

CVE-2014-2228 currently ranks highest (66/100): The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via u.

RSS feed for restlet · ← Back to latest CVEs