CVE-2013-4333

CRITICAL

OpenPNE 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 - XML External Entity Injection

Title source: llm

OpenPNE 3 versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 has an External Entity Injection Vulnerability

Core 3

Core References

Third Party Advisory, VDB Entry x_refsource_misc

Third Party Advisory, VDB Entry x_refsource_misc

Mailing List, Patch, Third Party Advisory x_refsource_misc

CVSS v3 9.1

EPSS 0.0223

EPSS Percentile 80.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-611

Status published

Products (5)

tejimaya/openpne 3.0.8.5

tejimaya/openpne 3.2.7.6

tejimaya/openpne 3.4.21.1

tejimaya/openpne 3.6.11

tejimaya/openpne 3.8.7

Published Jan 24, 2020

Tracked Since Feb 18, 2026