CVE-2013-4517
apache santuario xml security for java: no CVSS score yet. EPSS 8.9% chance of exploitation in the next 30 days. Fixed in org.apache.santuario:xmlsec 1.5.6.
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
- EPSS
- 8.9% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:santuario_xml_security_for_java
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-4p4w-6h54-g885 | Maven | org.apache.santuario:xmlsec | <1.5.6 | 1.5.6 |