CVE-2013-1824

The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.

Published: 2013-09-16 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2013-1824 is rated Moderate Risk (50.9/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 4.31%). EPSS rose +2.25% over the last day, indicating growing attacker interest. Review affected assets and schedule remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2013-1824

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 2.06% 4.31% +2.25%
2 2026-03-04 1.28% 2.06% +0.78%
3 2026-03-01 — 1.28% —

Full EPSS history (49 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2013-1824

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
4.3 2.0 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:N)
No availability impact.
 8.6 2.9 [email protected]

Weakness enumeration for CVE-2013-1824

OS Trackers for CVE-2013-1824

vendor priority summary link
gentoo high CVE-2013-1824: 1 GLSA(s) (201408-11), 1 atom(s) (dev-lang/php); latest impact high. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2013-1824
redhat — — https://access.redhat.com/security/cve/CVE-2013-1824
suse high CVE-2013-1824 severity important: SUSE including 193 source package names (apache2-mod_php5-5.6.28-1.1, apache2-mod_php7-7.0.14-1.4, …), 195 product×package rows across 12 product lines (SUSE Linux Enterprise Point of Service 11 SP3, SUSE Linux Enterprise Server 11 SP3 for Teradata, … (12 product lines)): Fixed 192, Known Not Affected 3. https://www.suse.com/security/cve/CVE-2013-1824/
ubuntu medium CVE-2013-1824 medium priority: Ubuntu including 1 source packages (php5), 6 status rows across 6 suites (hardy, lucid, oneiric, precise, quantal, upstream): released 6. https://ubuntu.com/security/CVE-2013-1824

Affected software / configurations for CVE-2013-1824

Vendor Product Version Raw CPE
redhat enterprise_linux 5 cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
redhat enterprise_linux 6.0 cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
apple mac_os_x >= 10.0.0, < 10.8.5 cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
php php < 5.3.22 cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
php php >= 5.4.0, < 5.4.12 cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

References for CVE-2013-1824

cvelogic Threat Intelligence