CVE-2013-4295
published 2013-10-24CVE-2013-4295: The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity…
PriorityP336medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
12.17%
95.6th percentile
The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | shindig | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Apache Shindig PHP Sensitive Information Disclosure
ghsa·2022-05-17
CVE-2013-4295 [MEDIUM] CWE-200 Apache Shindig PHP Sensitive Information Disclosure
Apache Shindig PHP Sensitive Information Disclosure
The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
OSV
Apache Shindig PHP Sensitive Information Disclosure
osv·2022-05-17
CVE-2013-4295 [MEDIUM] Apache Shindig PHP Sensitive Information Disclosure
Apache Shindig PHP Sensitive Information Disclosure
The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
No detection rules found.
No writeups or analysis indexed.
2013-10-24
Published