AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-1653

HIGH · CVSS 7.1 EPSS 5.38%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-03-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2013-1653
Severity
HIGH
CVSS
7.1
EPSS
5.38%

Original NVD Description

Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, when listening for incoming connections is enabled and allowing access to the "run" REST endpoint is allowed, allows remote authenticated users to execute arbitrary code via a crafted HTTP request.