CVE-2024-13971
Vulnerability Description
Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-611
Source
NVD
Vendor
Lobster GmbH
Product
Lobster_pro
Discussion (0)
Add Comment
No comments yet. Be the first!