Unscored severity · published Jul 1, 2013
CVE-2013-3925
Atlassian Crowd 2.5.x before 2.5.4, 2.6.x before 2.6.3, 2.3.8, and 2.4.9 allows remote attackers to read arbitrary files and send HTTP requests to intranet servers via a request…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Atlassian Crowd 2.5.x before 2.5.4, 2.6.x before 2.6.3, 2.3.8, and 2.4.9 allows remote attackers to read arbitrary files and send HTTP requests to intranet servers via a request to (1) /services/2 or (2) services/latest with a DTD containing an XML external entity declaration in conjunction with an entity reference.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Crowd · Atlassian
2.5.0; 2.5.1; 2.5.2; 2.5.3; 2.6.0; 2.6.1; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3925
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3925
Exploit
http://www.commandfive.com/papers/C5_TA_2013_3925_AtlassianCrowd.pdf
jira.atlassian.com
https://jira.atlassian.com/browse/CWD-3366
More from Crowd
9.8
CVE-2019-11580
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
7.5
CVE-2026-21589
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
9.8
CVE-2022-43782
Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent ability to call privileged endpoints…
9.8
CVE-2022-26136
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps
9.8
CVE-2016-6496
The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted…