CVE-2024-13971
HighSummary
Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares.
Risk Assessment
Attackers can gain access to sensitive data and perform HTTP GET requests to arbitrary services, posing a serious security threat to the organization.
Recommendation
It is recommended to update Lobster_pro to version 4.12.6-GA or later to mitigate this vulnerability.
Other vulnerabilities in Lobster_pro
Original NVD description (English source)
Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS