Security readout for executives and security teams
Burden before 1.8.1 had an authentication bypass in its “remember me” login feature. A remote attacker could gain privileges by manipulating the remember-me cookie. This matters most for any exposed Burden login page because the flaw affects authentication itself, not a secondary feature. Exposure is likely limited to deployments running Burden before 1.8.1, especially internet-facing instances with login.php reachable. The source bundle does not provide CPEs, package names, hosting patterns, or evidence of broader downstream products. Prioritize remediation if Burden is deployed and reachable by untrusted users. The issue can bypass login controls, but urgency depends on whether your environment actually uses Burden and whether the affected login page is exposed. Mitigation focus: Upgrade Burden to version 1.8.1 or later using upstream guidance.; Review the upstream fixing commit and release notes for deployment-specific considerations.; Invalidate active sessions and remember-me cookies after remediation..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2013-7137 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/joshf/Burden/commit/edaa1bb8f73d6f3c8b2e78b67f1b40e02fccd0c1CVE reference · x_refsource_CONFIRM
- https://github.com/joshf/Burden/issues/2CVE reference · x_refsource_CONFIRM
- https://github.com/joshf/Burden/releases/tag/1.8.1CVE reference · x_refsource_CONFIRM
- https://www.htbridge.com/advisory/HTB23192CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.