CVE-2013-1824

The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external…

published September 16, 2013

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04314 · 91.1th percentile
Published
2013-09-16T01:00Z
EPSS history
Timeline
  • 16 SEP 01:00Z
    The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external…
    cvelistv5