CVE-2013-1824 describes an XML External Entity (XXE) vulnerability in the SOAP parser of PHP versions prior to 5.3.22 and 5.4.12. This flaw allows remote attackers to read arbitrary files by crafting a malicious SOAP WSDL file with an XML external entity declaration. The vulnerability affects various distributions of PHP on Apple and Red Hat platforms. The CVSS score of 4.3 indicates a medium severity, with a network attack vector and medium attack complexity, potentially leading to partial confidentiality impact (data disclosure). There is no impact on integrity or availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | ||
>= 10.0.0, < 10.8.5CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* | ||
< 5.3.22CPE matchmatch criteria | cpe:2.3:a:php:php:*:*:*:*:*:*:*:* | ||
>= 5.4.0, < 5.4.12CPE matchmatch criteria | cpe:2.3:a:php:php:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.