CVE-2013-4486: redhat zanata – CVSS 9.8 · Watchpost

← All vulnerabilities

CVE-2013-4486

严重 9.8CVE-2013-4486 · Published 03/12/2019 · updated 16/06/2026

要点

CVE-2013-4486 是影响 zanata (redhat) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：1.5%，高于 74.3% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
zanata redhat	`≥ 3.0.0, ≤ 3.1.2`	No fix yet

Description

Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging

References

access.redhat.com/security/cve/cve-2013-4486 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
zanata/zanata-server · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free