CVE-2013-7435

MEDIUM · CVSS 6.5 EPSS 2.16%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-02-01 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2013-7435

Severity

MEDIUM

CVSS

6.5

EPSS

2.16%

Original Filing — NVD Description

The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to obtain sensitive settings history information by leveraging lack of user permission for retrieval in fm_IDL.xml.