CVE-2013-4295

medium · 5

The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CVSS

11.7%

EPSS (exploit prob.)

96th

EPSS percentile

2013-10-24

Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-200

Affected products

Vendor	Product	Affected versions
apache	shindig	2.5.0

Check a specific version with /api/v1/cve/match.

References

http://archives.neohapsis.com/archives/bugtraq/2013-10/0104.html
http://shindig.apache.org/security.html
http://www.securityfocus.com/bid/63260
http://archives.neohapsis.com/archives/bugtraq/2013-10/0104.html
http://shindig.apache.org/security.html
http://www.securityfocus.com/bid/63260

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-4295