CVE-2024-13971 | BDVDB-2026-329680 Detail

Description#

Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-04-30Record published in the CVE List.
2. Version 22026-05-17Most recent update recorded in the CVE List.