Miggo Logo
Miggo Vulnerability Database
→
CVE-2013-4517

CVE-2013-4517:
Improper Input Validation in Apache Santuario XML Security

4.3

CVSS Score

Basic Information

CVE ID
CVE-2013-4517
GHSA ID
GHSA-4p4w-6h54-g885
EPSS Score
0.93766%
CWE
CWE-20
Published
5/13/2022
Updated
3/5/2024
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
AV:N/AC:M/Au:N/C:N/I:N/A:P
Package NameEcosystemVulnerable VersionsFirst Patched Version
org.apache.santuario:xmlsecmaven< 1.5.61.5.6

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

*p**** S*ntu*rio XML S**urity *or J*v* ***or* *.*.*, w**n *pplyin* Tr*ns*orms, *llows r*mot* *tt**k*rs to **us* * **ni*l o* s*rvi** (m*mory *onsumption) vi* *r**t** *o*um*nt Typ* ***initions (*T*s), r*l*t** to si*n*tur*s.

Reasoning

No *n*lysis *v*il**l*