Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:20784
HistoryJul 12, 2019 - 6:19 a.m.

Arbitrary Code Execution

2019-07-1206:19:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.017 Low

EPSS

Percentile

87.8%

restlet is vulnerable to arbitrary code execution. A remote attacker is able to execute arbitrary Java code using a malicious XML document due to the default configuration of the ObjectRepresentation class which performs deserialization of objects from untrusted sources using the Java XMLDecoder.

0.017 Low

EPSS

Percentile

87.8%