CVE-2013-6429

The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152 and CVE-2013-7315.

• CWE-352
• CWE-611

• http://rhn.redhat.com/errata/RHSA-2014-0400.htmlThird Party Advisory
• http://secunia.com/advisories/57915Third Party Advisory
• http://www.gopivotal.com/security/cve-2013-6429Third Party Advisory
• http://www.securityfocus.com/archive/1/530770/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/64947Third Party Advisory, VDB Entry
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755Third Party Advisory
• https://jira.springsource.org/browse/SPR-11078?page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanelThird Party Advisory, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0400.htmlThird Party Advisory
• http://secunia.com/advisories/57915Third Party Advisory
• http://www.gopivotal.com/security/cve-2013-6429Third Party Advisory
• http://www.securityfocus.com/archive/1/530770/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/64947Third Party Advisory, VDB Entry
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755Third Party Advisory
• https://jira.springsource.org/browse/SPR-11078?page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanelThird Party Advisory, Vendor Advisory

Published

Jan 26, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6423Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6424Integer underflow in the xTrapezoidValid macro in render/pic…
• CVE-2013-6425Integer underflow in the pixman_trapezoid_valid macro in pix…
• CVE-2013-6426The cloudformation-compatible API in OpenStack Orchestration…
• CVE-2013-6427upgrade.py in the hp-upgrade service in HP Linux Imaging and…
• CVE-2013-6428The ReST API in OpenStack Orchestration API (Heat) before Ha…
• CVE-2013-6430The JavaScriptUtils.javaScriptEscape method in web/util/Java…5.4
• CVE-2013-6431The fib6_add function in net/ipv6/ip6_fib.c in the Linux ker…
• CVE-2013-6432The ping_recvmsg function in net/ipv4/ping.c in the Linux ke…
• CVE-2013-6433The default configuration in the Red Hat openstack-neutron p…
• CVE-2013-6434The remote-viewer in Red Hat Enterprise Virtualization Manag…
• CVE-2013-6435Race condition in RPM 4.11.1 and earlier allows remote attac…