Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2013-4295

EPSS 17.00% · P95
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2013-4295

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apache Shindig 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Shindig是美国阿帕奇（Apache）软件基金会的一个开源项目，它提供了OpenSocial的参考实现，并且作为一个参考容器，可在任意网站上运行支持OpenSocial的社交应用。 Apache Shindig 2.5.0版本中的Gadget Renderer中存在XML外部实体注入漏洞。远程攻击者可借助包含外部实体声明与实体引用相结合的XML文档利用该漏洞获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2013-4295

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2013-4295

请登录查看更多情报信息。

Same Patch Batch · n/a · 2013-10-24 · 52 CVEs total

CVE-2013-5188Apple Mac OS X Screen Lock功能权限许可和访问控制漏洞
CVE-2013-5537Cisco WSA/ESA/Content SMA Web框架拒绝服务漏洞
CVE-2013-5536Cisco Secure ACS 防火墙模块拒绝服务漏洞
CVE-2013-1743Bugzilla 跨站脚本漏洞
CVE-2013-5143Apple OS X Server Server App 设计错误漏洞
CVE-2013-5130Apple Safari WebKit 信息泄露漏洞
CVE-2013-4299Linux Kernel 信息泄露漏洞
CVE-2013-5148Apple Keynote 权限许可和访问控制漏洞
CVE-2013-5190Apple Mac OS X Smart Card Services 权限许可和访问控制漏洞
CVE-2013-5189Apple Mac OS X 权限许可和访问控制漏洞
CVE-2013-5191Apple Mac OS X syslog功能权限许可和访问控制漏洞
CVE-2013-5187Apple Mac OS X Screen Lock功能权限许可和访问控制漏洞
CVE-2013-5186Apple Mac OS X Power Management 权限许可和访问控制漏洞
CVE-2013-5185Apple Mac OS X ldapsearch命令行程序加密问题漏洞
CVE-2013-5184Apple Mac OS X kernel 拒绝服务漏洞
CVE-2013-5183Apple Mac OS X Mail 信息泄露漏洞
CVE-2013-5182Apple Mac OS X Mail 加密问题漏洞
CVE-2013-5181Apple Mac OS X Mail 加密问题漏洞
CVE-2013-5180Apple Mac OS X Libc 加密问题漏洞
CVE-2013-5179Apple Mac OS X App Sandbox 安全绕过漏洞

Showing top 20 of 52 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2013-4295

No comments yet

Leave a comment