CVE-2013-1643

The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external…

published March 6, 2013

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-1824.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10136 · 95.6th percentile
Published
2013-03-06T11:00Z
EPSS history
Timeline
  • 06 MAR 11:00Z
    The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external…
    cvelistv5