CVE-2013-4221
Restlet: remote code execution due to insecure XML deserialization
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.
La configuración por defecto de la clase ObjectRepresentation en Restlet anterior a la versión 2.1.4 deserializa objetos desde fuentes no confiables usando Java XMLDecoder, lo que permite a atacantes remotos ejecutar código Java arbitrario a través de XML manipulado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-06-12 CVE Reserved
- 2013-10-07 CVE Published
- 2023-05-22 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-16: Configuration
- CWE-91: XML Injection (aka Blind XPath Injection)
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://blog.diniscruz.com/2013/08/using-xmldecoder-to-execute-server-side.html | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/restlet/restlet-framework-java/issues/774 | 2016-12-07 |
| URL | Date | SRC |
|---|---|---|
| http://restlet.org/learn/2.1/changes | 2016-12-07 | |
| http://rhn.redhat.com/errata/RHSA-2013-1410.html | 2016-12-07 | |
| http://rhn.redhat.com/errata/RHSA-2013-1862.html | 2016-12-07 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=995275 | 2013-12-19 | |
| https://access.redhat.com/security/cve/CVE-2013-4221 | 2013-12-19 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | <= 2.1.3 Search vendor "Restlet" for product "Restlet" and version " <= 2.1.3" | - |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | milestone1 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | milestone2 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | milestone3 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | milestone4 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | milestone5 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | milestone6 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | rc1 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | rc2 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | rc3 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | rc4 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | rc5 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1 Search vendor "Restlet" for product "Restlet" and version "2.1" | rc6 |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1.0 Search vendor "Restlet" for product "Restlet" and version "2.1.0" | - |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1.1 Search vendor "Restlet" for product "Restlet" and version "2.1.1" | - |
Affected
| ||||||
| Restlet Search vendor "Restlet" | Restlet Search vendor "Restlet" for product "Restlet" | 2.1.2 Search vendor "Restlet" for product "Restlet" and version "2.1.2" | - |
Affected
| ||||||