VULNERABILITY INTELLIGENCE
CVE-2013-1881
CVSS score4.3 MEDIUM
EPSS probability3.20%
CISA KEVNot currently listed
Published2013-10-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Weakness classification
- CWE-20: Improper Input Validation