CVE-2013-1824: XEE
The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soapxmlParseFile and soapxmlParseMemory functions.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1824?
CVE-2013-1824 has been classified as a moderate severity vulnerability due to its potential impact allowing unauthorized access to sensitive files.
How do I fix CVE-2013-1824?
To fix CVE-2013-1824, upgrade PHP to version 5.3.23 or later, or to 5.4.13 or later.
What are the affected software versions in CVE-2013-1824?
CVE-2013-1824 affects PHP versions prior to 5.3.23 and 5.4.x prior to 5.4.13, along with specific versions of Red Hat Enterprise Linux and macOS.
What type of vulnerability is CVE-2013-1824?
CVE-2013-1824 is an XML External Entity (XXE) vulnerability that allows for arbitrary file reading.
Can CVE-2013-1824 be exploited remotely?
Yes, CVE-2013-1824 can be exploited remotely by attackers through specially crafted SOAP WSDL files.