CVE-2013-4335 opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities
CriticalCVSS 9.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openpne opopensocialplugin | = 0.8.2.1 | No fix listed |
| openpne opopensocialplugin | = 0.9.9.2 | No fix listed |
| openpne opopensocialplugin | = 0.9.13 | No fix listed |
| openpne opopensocialplugin | = 1.2.6 | No fix listed |
| opOpenSocialPlugin | = 0.8.2.1 | No fix listed |
| opOpenSocialPlugin | = > 0.9.9.2 | No fix listed |
| opOpenSocialPlugin | = 0.9.13 | No fix listed |
| opOpenSocialPlugin | = 1.2.6 (Fixed: 0.8.2.2 | No fix listed |
| opOpenSocialPlugin | = 0.9.9.3 | No fix listed |
| opOpenSocialPlugin | = 0.9.13.1 | No fix listed |
| opOpenSocialPlugin | = 1.2.6.1) | No fix listed |
References
- www.openwall.com mailing-list third-party-advisory
- www.securityfocus.com third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com third-party-advisory vdb-entry