What is CVE-2013-0136?

CVE-2013-0136 is a vulnerability in Mutiny, classified under Path Traversal. Published 2013-06-01.

Is CVE-2013-0136 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in Mutiny

CVE-2013-0136

Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service (file deletion or renaming) via (1) the uploadPath parameter in an UPLOAD operation; the paths[] parameter in a (2) DELETE, (3) CUT, or (4) COPY operation; or the newPath parameter in a (5) CUT or (6) COPY operation.

Vulnerability class: Path Traversal (Directory Traversal)

Published 2013-06-01 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 8.5 (High). Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.403 (98.6th percentile), scored 2026-10-02.

Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 99th percentile — 98.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.403 · newest: 0.403 · change: 0.000

Affected products

Weakness classification (CWE)

CWE-22 — Path Traversal

Public proof-of-concept exploits

References

community.rapid7.com/community/metasploit/blog/2013/05/15/new-1day-exploits-mut… (Exploit)
www.kb.cert.org/vuls/id/701572 (US Government Resource, third-party-advisory)

Frequently asked questions

What is CVE-2013-0136?: CVE-2013-0136 is a vulnerability in Mutiny, classified under Path Traversal. Published 2013-06-01.
Is CVE-2013-0136 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.