CVE-2013-2202

WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in…

published July 8, 2013

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02250 · 82.7th percentile
Published
2013-07-08T20:00Z
EPSS history
Timeline
  • 08 JUL 20:00Z
    WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in…
    cvelistv5