CVE-2013-1824

Fixed in a distro release EPSS 4%

The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.

Published 2013-09-16 · CVE record · OSV

Products: redhat enterprise_linux, apple mac_os_x, php

Distro releases