CVE-2013-4295
apache shindig: no CVSS score yet. EPSS 12% chance of exploitation in the next 30 days. Fixed in org.apache.shindig:shindig-php 2.5.0-update1.
The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
- EPSS
- 12% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:shindig
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6jvw-rpw4-gj4x | Maven | org.apache.shindig:shindig-php | >=2.5.0-beta1 <2.5.0-update1 | 2.5.0-update1 |