Lucene search
K

Parsing of external XML entities can be exploited to retrieve files or make HTTP requests on the target network

🗓️ 18 Jun 2013 22:44:59Reported by 06d2553cda0eType 
atlassian
 atlassian
🔗 jira.atlassian.com👁 48 Views

Parsing of XML entities can retrieve files or make HTTP requests on the target network. Issue CVE-2013-3925. Crowd servers require upgrade to 2.5.4 or 2.6.

Related
ReporterTitlePublishedViews
Family
Tenable Nessus
Atlassian Crowd 2.5.x < 2.5.4 Information Disclosure
23 Mar 201700:00
nessus
Tenable Nessus
Atlassian Crowd 2.6.x < 2.6.3 Information Disclosure
23 Mar 201700:00
nessus
Tenable Nessus
Atlassian Crowd XML External Entity Request Handling Arbitrary File Disclosure
3 Jul 201300:00
nessus
Tenable Nessus
Atlassian JIRA < 5.0.1 XML Parsing DoS
1 Jun 201200:00
nessus
Tenable Nessus
Atlassian Jira < 5.0.1 Arbitrary File Reads
14 Mar 202300:00
nessus
Circl
CVE-2012-2926
17 May 201200:00
circl
CVE
CVE-2012-2926
22 May 201215:00
cve
CVE
CVE-2013-3925
1 Jul 201321:00
cve
Cvelist
CVE-2012-2926
22 May 201215:00
cvelist
Cvelist
CVE-2013-3925
1 Jul 201321:00
cvelist
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

15 Aug 2019 07:05Current
0.1Low risk
Vulners AI Score0.1
CVSS 26.4
CVSS 3.19.1
EPSS0.64534
48