[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_DYRyiNzw8p4lmh2t4Wt7mL2MRUiiB66hhGdmXVIVm8":3,"g5a-risk:CVE-2013-4152":285},{"success":4,"data":5,"meta":283},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":95,"references":96,"referencesCount":173,"weaknesses":174,"weaknessesCount":178,"isActivelyExploited":179,"cisaInfo":15,"otxData":15,"relatedBlogPosts":180,"seoMetadata":181,"configurations":206,"relatedVendorCves":274,"notableEvents":275},"CVE-2013-4152","What is CVE-2013-4152?","The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.","The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows contex...","2014-01-23T21:55:04.853","2025-04-11T00:51:21.963",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,6.4,0.25634,[28,28,28,28,28,28,28],"Medium",[32,37,40,43,46,49,52,55,58,62,65,68,71,74,77,80,83,86,89,92],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"springsource","spring_framework","3.0.0","cpe:2.3:a:springsource:spring_framework:3.0.0:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":38,"criteria":39,"vulnerable":4},"3.0.0.m1","cpe:2.3:a:springsource:spring_framework:3.0.0.m1:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":41,"criteria":42,"vulnerable":4},"3.0.0.m2","cpe:2.3:a:springsource:spring_framework:3.0.0.m2:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":44,"criteria":45,"vulnerable":4},"3.0.1","cpe:2.3:a:springsource:spring_framework:3.0.1:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":47,"criteria":48,"vulnerable":4},"3.0.2","cpe:2.3:a:springsource:spring_framework:3.0.2:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":50,"criteria":51,"vulnerable":4},"3.0.3","cpe:2.3:a:springsource:spring_framework:3.0.3:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":53,"criteria":54,"vulnerable":4},"3.0.4","cpe:2.3:a:springsource:spring_framework:3.0.4:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":56,"criteria":57,"vulnerable":4},"3.0.5","cpe:2.3:a:springsource:spring_framework:3.0.5:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":60,"criteria":61,"vulnerable":4},"vmware","*","cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":63,"criteria":64,"vulnerable":4},"3.0.6","cpe:2.3:a:vmware:spring_framework:3.0.6:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":66,"criteria":67,"vulnerable":4},"3.0.7","cpe:2.3:a:vmware:spring_framework:3.0.7:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":69,"criteria":70,"vulnerable":4},"3.1.0","cpe:2.3:a:vmware:spring_framework:3.1.0:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":72,"criteria":73,"vulnerable":4},"3.1.1","cpe:2.3:a:vmware:spring_framework:3.1.1:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":75,"criteria":76,"vulnerable":4},"3.1.2","cpe:2.3:a:vmware:spring_framework:3.1.2:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":78,"criteria":79,"vulnerable":4},"3.1.3","cpe:2.3:a:vmware:spring_framework:3.1.3:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":81,"criteria":82,"vulnerable":4},"3.1.4","cpe:2.3:a:vmware:spring_framework:3.1.4:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":84,"criteria":85,"vulnerable":4},"3.2.0","cpe:2.3:a:vmware:spring_framework:3.2.0:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":87,"criteria":88,"vulnerable":4},"3.2.1","cpe:2.3:a:vmware:spring_framework:3.2.1:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":90,"criteria":91,"vulnerable":4},"3.2.2","cpe:2.3:a:vmware:spring_framework:3.2.2:*:*:*:*:*:*:*",{"vendor":59,"product":34,"version":93,"criteria":94,"vulnerable":4},"4.0.0","cpe:2.3:a:vmware:spring_framework:4.0.0:milestone1:*:*:*:*:*:*",20,[97,101,104,107,110,114,117,121,124,128,133,137,142,147,149,151,153,155,157,159,161,163,165,167,169,171],{"url":98,"source":99,"tags":100},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0212.html","Red Hat",[],{"url":102,"source":99,"tags":103},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0245.html",[],{"url":105,"source":99,"tags":106},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0254.html",[],{"url":108,"source":99,"tags":109},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0400.html",[],{"url":111,"source":112,"tags":113},"http:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2013\u002FAug\u002F154","Seclists",[],{"url":115,"source":112,"tags":116},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2013\u002FNov\u002F14",[],{"url":118,"source":119,"tags":120},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F56247","Secunia",[],{"url":122,"source":119,"tags":123},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F57915",[],{"url":125,"source":126,"tags":127},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2014\u002Fdsa-2842","Debian",[],{"url":129,"source":130,"tags":131},"http:\u002F\u002Fwww.gopivotal.com\u002Fsecurity\u002Fcve-2013-4152","Gopivotal",[132],"Vendor Advisory",{"url":134,"source":135,"tags":136},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F61951","Securityfocus",[],{"url":138,"source":139,"tags":140},"https:\u002F\u002Fgithub.com\u002Fspring-projects\u002Fspring-framework\u002Fpull\u002F317\u002Ffiles","GitHub",[141],"Patch",{"url":143,"source":144,"tags":145},"https:\u002F\u002Fjira.springsource.org\u002Fbrowse\u002FSPR-10806","Springsource",[146,141],"Exploit",{"url":98,"source":99,"tags":148},[],{"url":102,"source":99,"tags":150},[],{"url":105,"source":99,"tags":152},[],{"url":108,"source":99,"tags":154},[],{"url":111,"source":112,"tags":156},[],{"url":115,"source":112,"tags":158},[],{"url":118,"source":119,"tags":160},[],{"url":122,"source":119,"tags":162},[],{"url":125,"source":126,"tags":164},[],{"url":129,"source":130,"tags":166},[132],{"url":134,"source":135,"tags":168},[],{"url":138,"source":139,"tags":170},[141],{"url":143,"source":144,"tags":172},[146,141],26,[175],{"id":176,"name":176,"description":177},"Unknown","CWE-264",1,false,[],{"title":182,"metaDescription":183,"keywords":184,"canonicalUrl":185,"structuredData":186},"What is CVE-2013-4152? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2013-4152, a medium severity cyber security vulnerability from 2014. The Spring OXM wrapper in Spring Framework before 3.2.4 an...","CVE-2013-4152, CVE-2013-4152 vulnerability, CVE-2013-4152 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, springsource security, vmware security, spring_framework vulnerability","\u002Fwhat-is\u002Fcve-2013-4152",{"@context":187,"@type":188,"headline":182,"description":183,"datePublished":10,"dateModified":11,"author":189,"publisher":193,"about":197,"mainEntityOfPage":201,"articleSection":204,"keywords":205},"https:\u002F\u002Fschema.org","TechArticle",{"@type":190,"name":191,"url":192},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":190,"name":191,"url":192,"logo":194},{"@type":195,"url":196},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":198,"name":6,"description":199,"additionalType":200},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":202,"@id":203},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2013-4152","Cybersecurity","CVE-2013-4152, CVE-2013-4152 vulnerability, CVE-2013-4152 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[207],{"Operator":15,"Negate":15,"Nodes":208},[209],{"Operator":210,"Negate":15,"CPEMatch":211},"OR",[212,214,217,220,223,226,229,232,235,237,239,241,243,245,247,249,252,254,256,258,260,262,264,266,268,270,272],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":213,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"62111DAE-3E05-4D95-8B34-E2EFB6142DCA",{"Vulnerable":4,"Criteria":215,"MatchCriteriaID":216,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:m1:*:*:*:*:*:*","13E1344C-CB41-48FC-BB98-7FEBEBF190E9",{"Vulnerable":4,"Criteria":218,"MatchCriteriaID":219,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:m2:*:*:*:*:*:*","AD66E687-C387-486D-AC34-279961311A8F",{"Vulnerable":4,"Criteria":221,"MatchCriteriaID":222,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:m3:*:*:*:*:*:*","49018DD7-9E85-4B4D-B054-CD17EFB13E87",{"Vulnerable":4,"Criteria":224,"MatchCriteriaID":225,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:m4:*:*:*:*:*:*","37FC3F37-A033-491B-96F0-8B38E2E43BFA",{"Vulnerable":4,"Criteria":227,"MatchCriteriaID":228,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:rc1:*:*:*:*:*:*","12021339-C885-4A9E-95C1-4695F3DC1F76",{"Vulnerable":4,"Criteria":230,"MatchCriteriaID":231,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:rc2:*:*:*:*:*:*","6FB321B9-4838-4AAC-B8AF-C92015C946A0",{"Vulnerable":4,"Criteria":233,"MatchCriteriaID":234,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:rc3:*:*:*:*:*:*","DC19AE9E-B46C-4872-B562-E97DC80543F7",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":236,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"32F4893D-61E6-4E7F-A30A-3AB96264531B",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":238,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B7F99079-D584-456B-A116-62D10FBF8233",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":240,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9A9F796E-340B-4FF5-9322-94E57D7BCEE6",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":242,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D8BA17FD-BC52-4D84-9753-5D41D3BC35B4",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":244,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"637484A7-AB05-4F64-9311-6741BDF2579F",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":246,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"FAE5CFA5-769F-49E9-A7A9-56C8CED8692E",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":248,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"528C85CE-2CC6-4B09-8C25-44A2B1C2D8B2",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":250,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":251},"EB86A413-9595-4BD1-A5FD-1A62B93EA1C9","3.2.3",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":253,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B9D5172D-5E19-40C1-8C1B-CC22706E780D",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":255,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"46E410D2-DA53-4806-B296-451C3D9CDEEA",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":257,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"20D6E5AC-9898-416F-8268-3623E1706072",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":259,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B61F3E25-A415-4A25-91D6-4FBA6F575AAB",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":261,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8A2C4C81-2E79-411C-AEB8-A5E40FC28D31",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":263,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"010915FE-3BCE-4652-8D8B-47EE085F3BEE",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":265,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D16C8EFA-F1E4-48C3-BC86-A132873426C4",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":267,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"47CED0ED-D67E-48AF-BB1A-EB1030897A8C",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":269,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D2E2EA60-735E-431E-BEFE-DC5C1046E532",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":271,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DFD1FA92-7BFC-4874-89FC-BE0F378F0DB3",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":273,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"FD20A2BE-2024-4DAA-825E-213ACB667DE9",[],[276],{"id":277,"eventType":278,"eventTime":279,"details":280,"label":281,"color":282},"d5143e6b-3644-4baf-aa90-52b5272e6fde","LOW_EPSS_DELTA","2026-04-01T14:23:26.290434+00:00","Daily EPSS score decreased by 0.167 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":284,"version":21},1792242078999,{"score":286,"band":30,"action":287,"scoredAt":288},47,"Plan remediation","2026-10-17T07:07:27.156869+00:00"]