NVD

Id
40249  
Name
CVE-2013-4701  
Description
Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-08-21  
Modified Date
2016-11-28  
Seq
2013-4701  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204692 40249 CVE-2013-4701 JVN#24713981  View
204693 40249 CVE-2013-4701 JVNDB-2013-000080  View
204694 40249 CVE-2013-4701 openSUSE-SU-2016:2025  View
204695 40249 CVE-2013-4701 openSUSE-SU-2016:2114  View
204696 40249 CVE-2013-4701 https://github.com/openid/php-openid/commit/625c16bb28bb120d262b3f19f89c2c06cb9b0da9  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19383 JVNDB-2013-000080 PHP OpenID Library における XML 外部実体参照に関する脆弱性 PHP OpenID Library には、XML 外部実体参照に関する脆弱性が存在します。 CVE-2013-4701 64643 CVE-2013-4701 40249 6.4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000080.html 2013-08-21 2013-08-23 View