CVE-2013-2182
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers...
CVE-2013-2182 is a medium vulnerability (CVSS 5.8) in Monkey-project Monkey, published June 13, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.59%, the 92nd percentile. No source names a fixed version.
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
Exploit likelihood
What each source reports
NVD Score used
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
- Record
CVE-2013-2182- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
- Record
CVE-2013-2182- Updated
- 2026-11-02
EUVDEUVD-2013-2141 No score
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
- Record
EUVD-2013-2141- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rg7g-558c-fp2q No score
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers...
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
- Record
GHSA-rg7g-558c-fp2q- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Monkey HTTP Daemon Mandril Security Plugin - Security Bypass | 2013-06-14 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |
References
securityfocus.com/bid/60569
bugs.monkey-project.com/ticket/186
osvdb.org/94287
github.com/monkey/monkey/commit/15f72c1ee5e0afad20232bdf0fcecab8d62a5d89
secunia.com/advisories/53638
openwall.com/lists/oss-security/2013/06/14/11
nvd.nist.gov/vuln/detail/CVE-2013-2182