CVE-2013-2160

CVE-2013-2160 describes a denial-of-service vulnerability in the streaming XML parser of Apache CXF versions 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4. Remote attackers can exploit this by submitting crafted XML with an excessive number of elements, attributes, or nested constructs, leading to high CPU and memory consumption. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, resulting in a partial availability impact. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.