CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2153

The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-dependent attackers to reuse signatures and spoof arbitrary content via crafted Reference elements in the Signature, aka "XML Signature Bypass issue."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.7%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2013-2153

Apache » Xml Security For C++ » Version: 0.1.0

cpe:2.3:a:apache:xml_security_for_c++:0.1.0
Apache » Xml Security For C++ » Version: 0.2.0

cpe:2.3:a:apache:xml_security_for_c++:0.2.0
Apache » Xml Security For C++ » Version: 1.1.0

cpe:2.3:a:apache:xml_security_for_c++:1.1.0
Apache » Xml Security For C++ » Version: 1.2.0

cpe:2.3:a:apache:xml_security_for_c++:1.2.0
Apache » Xml Security For C++ » Version: 1.2.1

cpe:2.3:a:apache:xml_security_for_c++:1.2.1
Apache » Xml Security For C++ » Version: 1.3.0

cpe:2.3:a:apache:xml_security_for_c++:1.3.0
Apache » Xml Security For C++ » Version: 1.3.1

cpe:2.3:a:apache:xml_security_for_c++:1.3.1
Apache » Xml Security For C++ » Version: 1.4.0

cpe:2.3:a:apache:xml_security_for_c++:1.4.0
Apache » Xml Security For C++ » Version: 1.5.0

cpe:2.3:a:apache:xml_security_for_c++:1.5.0
Apache » Xml Security For C++ » Version: 1.5.1

cpe:2.3:a:apache:xml_security_for_c++:1.5.1
Apache » Xml Security For C++ » Version: 1.6.0

cpe:2.3:a:apache:xml_security_for_c++:1.6.0
Apache » Xml Security For C++ » Version: 1.6.1

cpe:2.3:a:apache:xml_security_for_c++:1.6.1
Apache » Xml Security For C++ » Version: 1.7.0

cpe:2.3:a:apache:xml_security_for_c++:1.7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2153

Products

Pricing

Contact Us