Lucene search

K
cvelistMitreCVELIST:CVE-2013-3925
HistoryJul 01, 2013 - 9:00 p.m.

CVE-2013-3925

2013-07-0121:00:00
mitre
www.cve.org
7
atlassian crowd
security vulnerability
http request
xml external entity

AI Score

9

Confidence

High

EPSS

0.003

Percentile

70.1%

Atlassian Crowd 2.5.x before 2.5.4, 2.6.x before 2.6.3, 2.3.8, and 2.4.9 allows remote attackers to read arbitrary files and send HTTP requests to intranet servers via a request to (1) /services/2 or (2) services/latest with a DTD containing an XML external entity declaration in conjunction with an entity reference.

AI Score

9

Confidence

High

EPSS

0.003

Percentile

70.1%

Related for CVELIST:CVE-2013-3925