CVE-2013-4295

CVE-2013-4295 concerns the gadget renderer in Apache Shindig 2.5.0 for PHP, which is vulnerable to an XML External Entity (XXE) injection via an XML document containing an external entity declaration. This leads to information disclosure from the gadget rendering server. Affected: Apache Shindig ...