{"id":"CVE-2012-3363","url":"https://www.cyber-defence.io/tools/cve/CVE-2012-3363","generatedAt":"2026-10-27T19:44:39.909Z","title":"Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE…","description":"Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.","published":"2013-02-13T17:55:01.000Z","lastModified":"2026-06-16T23:43:05.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.1","score":9.1,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"},"cwe":["CWE-611"],"affected":["zend/zend framework","fedoraproject/fedora","debian/debian linux"],"epss":{"score":0.49313,"percentile":0.9888,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2012-06-27","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":19408,"kind":"exploit","title":"Zend Framework < 2.0.0 beta4 < 1.12 RC1 < 1.11.11 - Local File Disclosure","url":"https://www.exploit-db.com/exploits/19408","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/19408.txt","file":"exploits/php/webapps/19408.txt","published":"2012-06-27","added":"2012-06-27","updated":"2016-12-31","author":"SEC Consult","type":"webapps","platform":"php","port":null,"verified":false,"codes":["OSVDB-83221","CVE-2012-3363"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"http://framework.zend.com/security/advisory/ZF2012-01"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 49.3%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://framework.zend.com/security/advisory/ZF2012-01","tags":["Vendor Advisory"],"source":"secalert@redhat.com"},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34284","tags":["Patch"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html","tags":["Mailing List"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html","tags":["Mailing List"],"source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2013/03/25/2","tags":["Mailing List"],"source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2505","tags":["Mailing List"],"source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/06/26/2","tags":["Mailing List"],"source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/06/26/4","tags":["Mailing List"],"source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/06/27/2","tags":["Mailing List"],"source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1027208","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"https://moodle.org/mod/forum/discuss.php?d=225345","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://www.sec-consult.com/files/20120626-0_zend_framework_xxe_injection.txt","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://framework.zend.com/security/advisory/ZF2012-01","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34284","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2013/03/25/2","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2505","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/06/26/2","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/06/26/4","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/06/27/2","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1027208","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://moodle.org/mod/forum/discuss.php?d=225345","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/files/20120626-0_zend_framework_xxe_injection.txt","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-3363","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}