CVE-2013-0315
published 2013-04-12CVE-2013-0315: The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML…
PriorityP429medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.37%
68.8th percentile
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entity Expansion (XEE) attack.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | jboss_enterprise_portal_platform | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
Portal: XML eXternal Entity (XXE) flaw in site import
vendor_redhat·2013-03-07·CVSS 5.0
CVE-2013-0315 [MEDIUM] Portal: XML eXternal Entity (XXE) flaw in site import
Portal: XML eXternal Entity (XXE) flaw in site import
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entity Expansion (XEE) attack.
Package: Portal (Red Hat JBoss Portal 5) - Affected
GHSA
GHSA-rphh-qhqw-93pr: The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5
ghsa_unreviewed·2022-05-05
CVE-2013-0315 [MEDIUM] GHSA-rphh-qhqw-93pr: The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entity Expansion (XEE) attack.
No detection rules found.
No public exploits indexed.
http://rhn.redhat.com/errata/RHSA-2013-0613.htmlhttp://secunia.com/advisories/52552http://www.osvdb.org/91121https://bugzilla.redhat.com/show_bug.cgi?id=913340http://rhn.redhat.com/errata/RHSA-2013-0613.htmlhttp://secunia.com/advisories/52552http://www.osvdb.org/91121https://bugzilla.redhat.com/show_bug.cgi?id=913340
2013-04-12
Published