CVE-2013-1824
Medium
Description
The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.
SeverityMedium
CVSS4.3
Exploit probability—
Product
Redhat Enterprise Linux
PublishedSep 16, 2013
First seenSep 16, 2013
How to fix
Update
- apple mac_os_x10.8.5 or later
- php php5.3.22, 5.4.12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise_linux | 5, 6.0 | — |
| apple mac_os_x | 10.0.0 ≤ v < 10.8.5 | 10.8.5 |
| php php | v < 5.3.22, 5.4.0 ≤ v < 5.4.12 | 5.3.22, 5.4.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.