{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/98755?format=json","vulnerability_id":"VCID-mntc-3nm2-xybw","summary":"Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, when listening for incoming connections is enabled and allowing access to the \"run\" REST endpoint is allowed, allows remote authenticated users to execute arbitrary code via a crafted HTTP request.","aliases":[{"alias":"CVE-2013-1653"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/124329?format=json","purl":"pkg:deb/debian/puppet@2.7.18-3?distro=bullseye","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.7.18-3%3Fdistro=bullseye"},{"url":"http://public2.vulnerablecode.io/api/packages/228789?format=json","purl":"pkg:deb/debian/puppet@2.7.23-1~deb7u3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1n9j-3ymz-dub5"},{"vulnerability":"VCID-38dv-ps67-r7f7"},{"vulnerability":"VCID-3xtf-acbg-nqhe"},{"vulnerability":"VCID-86jb-mnzj-e3cy"},{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-nrht-tzzq-eqhs"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"},{"vulnerability":"VCID-wqm7-m41f-pqfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.7.23-1~deb7u3"},{"url":"http://public2.vulnerablecode.io/api/packages/124315?format=json","purl":"pkg:deb/debian/puppet@5.5.22-2?distro=bullseye","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@5.5.22-2%3Fdistro=bullseye"},{"url":"http://public2.vulnerablecode.io/api/packages/192340?format=json","purl":"pkg:ebuild/app-admin/puppet@2.7.23","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-admin/puppet@2.7.23"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/228785?format=json","purl":"pkg:deb/debian/puppet@0.20.1-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1n9j-3ymz-dub5"},{"vulnerability":"VCID-38dv-ps67-r7f7"},{"vulnerability":"VCID-3xtf-acbg-nqhe"},{"vulnerability":"VCID-6816-tprb-zqgt"},{"vulnerability":"VCID-7gsz-qxb2-mbe7"},{"vulnerability":"VCID-7wuf-dtva-x7ej"},{"vulnerability":"VCID-86jb-mnzj-e3cy"},{"vulnerability":"VCID-982t-up4e-t7eg"},{"vulnerability":"VCID-9t7v-tnzt-cqa6"},{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-c6dw-92d3-n7c5"},{"vulnerability":"VCID-df8e-jf8b-puec"},{"vulnerability":"VCID-djqs-7e92-wbb7"},{"vulnerability":"VCID-ear8-9pcm-zqfz"},{"vulnerability":"VCID-ej47-hdx8-pbhp"},{"vulnerability":"VCID-fjyu-jwpx-sfe5"},{"vulnerability":"VCID-fwaq-2kzp-2kgc"},{"vulnerability":"VCID-g1nc-3ca8-xkes"},{"vulnerability":"VCID-g5ek-ebw1-ebhf"},{"vulnerability":"VCID-gfnp-y7y2-f7fu"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-jrdk-dzhe-z7ff"},{"vulnerability":"VCID-jwz8-kbu1-f3d7"},{"vulnerability":"VCID-khb1-phav-ukf8"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-mntc-3nm2-xybw"},{"vulnerability":"VCID-msp5-ahmq-hbc3"},{"vulnerability":"VCID-nrht-tzzq-eqhs"},{"vulnerability":"VCID-qhz5-1muw-dqgn"},{"vulnerability":"VCID-ta3j-j5s5-hfba"},{"vulnerability":"VCID-thv1-66q2-uuc9"},{"vulnerability":"VCID-vxdt-q1t7-27hh"},{"vulnerability":"VCID-wmv1-2hjk-8ycf"},{"vulnerability":"VCID-wpqq-eg3b-3kcc"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"},{"vulnerability":"VCID-wqm7-m41f-pqfm"},{"vulnerability":"VCID-xhmp-nrhy-zfcn"},{"vulnerability":"VCID-xxht-cd83-7qb9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@0.20.1-1"},{"url":"http://public2.vulnerablecode.io/api/packages/228786?format=json","purl":"pkg:deb/debian/puppet@0.24.5-3%2Blenny2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1n9j-3ymz-dub5"},{"vulnerability":"VCID-38dv-ps67-r7f7"},{"vulnerability":"VCID-3xtf-acbg-nqhe"},{"vulnerability":"VCID-6816-tprb-zqgt"},{"vulnerability":"VCID-7gsz-qxb2-mbe7"},{"vulnerability":"VCID-7wuf-dtva-x7ej"},{"vulnerability":"VCID-86jb-mnzj-e3cy"},{"vulnerability":"VCID-982t-up4e-t7eg"},{"vulnerability":"VCID-9t7v-tnzt-cqa6"},{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-c6dw-92d3-n7c5"},{"vulnerability":"VCID-df8e-jf8b-puec"},{"vulnerability":"VCID-djqs-7e92-wbb7"},{"vulnerability":"VCID-ear8-9pcm-zqfz"},{"vulnerability":"VCID-ej47-hdx8-pbhp"},{"vulnerability":"VCID-fjyu-jwpx-sfe5"},{"vulnerability":"VCID-fwaq-2kzp-2kgc"},{"vulnerability":"VCID-g1nc-3ca8-xkes"},{"vulnerability":"VCID-g5ek-ebw1-ebhf"},{"vulnerability":"VCID-gfnp-y7y2-f7fu"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-jrdk-dzhe-z7ff"},{"vulnerability":"VCID-jwz8-kbu1-f3d7"},{"vulnerability":"VCID-khb1-phav-ukf8"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-mntc-3nm2-xybw"},{"vulnerability":"VCID-msp5-ahmq-hbc3"},{"vulnerability":"VCID-nrht-tzzq-eqhs"},{"vulnerability":"VCID-qhz5-1muw-dqgn"},{"vulnerability":"VCID-ta3j-j5s5-hfba"},{"vulnerability":"VCID-thv1-66q2-uuc9"},{"vulnerability":"VCID-vxdt-q1t7-27hh"},{"vulnerability":"VCID-wmv1-2hjk-8ycf"},{"vulnerability":"VCID-wpqq-eg3b-3kcc"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"},{"vulnerability":"VCID-wqm7-m41f-pqfm"},{"vulnerability":"VCID-xhmp-nrhy-zfcn"},{"vulnerability":"VCID-xxht-cd83-7qb9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@0.24.5-3%252Blenny2"},{"url":"http://public2.vulnerablecode.io/api/packages/228787?format=json","purl":"pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1n9j-3ymz-dub5"},{"vulnerability":"VCID-38dv-ps67-r7f7"},{"vulnerability":"VCID-3xtf-acbg-nqhe"},{"vulnerability":"VCID-6816-tprb-zqgt"},{"vulnerability":"VCID-7gsz-qxb2-mbe7"},{"vulnerability":"VCID-7wuf-dtva-x7ej"},{"vulnerability":"VCID-86jb-mnzj-e3cy"},{"vulnerability":"VCID-9t7v-tnzt-cqa6"},{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-c6dw-92d3-n7c5"},{"vulnerability":"VCID-df8e-jf8b-puec"},{"vulnerability":"VCID-djqs-7e92-wbb7"},{"vulnerability":"VCID-ear8-9pcm-zqfz"},{"vulnerability":"VCID-ej47-hdx8-pbhp"},{"vulnerability":"VCID-fjyu-jwpx-sfe5"},{"vulnerability":"VCID-fwaq-2kzp-2kgc"},{"vulnerability":"VCID-g1nc-3ca8-xkes"},{"vulnerability":"VCID-g5ek-ebw1-ebhf"},{"vulnerability":"VCID-gfnp-y7y2-f7fu"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-jrdk-dzhe-z7ff"},{"vulnerability":"VCID-jwz8-kbu1-f3d7"},{"vulnerability":"VCID-khb1-phav-ukf8"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-mntc-3nm2-xybw"},{"vulnerability":"VCID-nrht-tzzq-eqhs"},{"vulnerability":"VCID-qhz5-1muw-dqgn"},{"vulnerability":"VCID-ta3j-j5s5-hfba"},{"vulnerability":"VCID-thv1-66q2-uuc9"},{"vulnerability":"VCID-vxdt-q1t7-27hh"},{"vulnerability":"VCID-wmv1-2hjk-8ycf"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"},{"vulnerability":"VCID-wqm7-m41f-pqfm"},{"vulnerability":"VCID-xhmp-nrhy-zfcn"},{"vulnerability":"VCID-xxht-cd83-7qb9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.6.2-5%252Bsqueeze9"},{"url":"http://public2.vulnerablecode.io/api/packages/228788?format=json","purl":"pkg:deb/debian/puppet@2.6.2-5%2Bsqueeze10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1n9j-3ymz-dub5"},{"vulnerability":"VCID-38dv-ps67-r7f7"},{"vulnerability":"VCID-3xtf-acbg-nqhe"},{"vulnerability":"VCID-6816-tprb-zqgt"},{"vulnerability":"VCID-7gsz-qxb2-mbe7"},{"vulnerability":"VCID-7wuf-dtva-x7ej"},{"vulnerability":"VCID-86jb-mnzj-e3cy"},{"vulnerability":"VCID-9t7v-tnzt-cqa6"},{"vulnerability":"VCID-b5ns-wtb6-fkha"},{"vulnerability":"VCID-c6dw-92d3-n7c5"},{"vulnerability":"VCID-df8e-jf8b-puec"},{"vulnerability":"VCID-djqs-7e92-wbb7"},{"vulnerability":"VCID-ear8-9pcm-zqfz"},{"vulnerability":"VCID-ej47-hdx8-pbhp"},{"vulnerability":"VCID-fjyu-jwpx-sfe5"},{"vulnerability":"VCID-fwaq-2kzp-2kgc"},{"vulnerability":"VCID-g1nc-3ca8-xkes"},{"vulnerability":"VCID-g5ek-ebw1-ebhf"},{"vulnerability":"VCID-gfnp-y7y2-f7fu"},{"vulnerability":"VCID-jj8h-wz8z-xfbq"},{"vulnerability":"VCID-jrdk-dzhe-z7ff"},{"vulnerability":"VCID-jwz8-kbu1-f3d7"},{"vulnerability":"VCID-khb1-phav-ukf8"},{"vulnerability":"VCID-mn3q-6cs1-ukcq"},{"vulnerability":"VCID-mntc-3nm2-xybw"},{"vulnerability":"VCID-nrht-tzzq-eqhs"},{"vulnerability":"VCID-qhz5-1muw-dqgn"},{"vulnerability":"VCID-ta3j-j5s5-hfba"},{"vulnerability":"VCID-thv1-66q2-uuc9"},{"vulnerability":"VCID-vxdt-q1t7-27hh"},{"vulnerability":"VCID-wmv1-2hjk-8ycf"},{"vulnerability":"VCID-wqeh-3r7d-7ffz"},{"vulnerability":"VCID-wqm7-m41f-pqfm"},{"vulnerability":"VCID-xhmp-nrhy-zfcn"},{"vulnerability":"VCID-xxht-cd83-7qb9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/puppet@2.6.2-5%252Bsqueeze10"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2013-1653","reference_id":"","reference_type":"","scores":[{"value":"0.01966","scoring_system":"epss","scoring_elements":"0.83849","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01966","scoring_system":"epss","scoring_elements":"0.83872","published_at":"2026-06-05T12:55:00Z"},{"value":"0.01966","scoring_system":"epss","scoring_elements":"0.83875","published_at":"2026-06-06T12:55:00Z"},{"value":"0.01966","scoring_system":"epss","scoring_elements":"0.8387","published_at":"2026-06-07T12:55:00Z"},{"value":"0.01966","scoring_system":"epss","scoring_elements":"0.83861","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2013-1653"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1653","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1653"},{"reference_url":"https://security.gentoo.org/glsa/201308-04","reference_id":"GLSA-201308-04","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201308-04"},{"reference_url":"https://usn.ubuntu.com/1759-1/","reference_id":"USN-1759-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1759-1/"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":"0.5","weighted_severity":"0.0","risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mntc-3nm2-xybw"}