Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability

🗓️ 13 Jun 2024 09:31:00Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 103 Views

Magento XXE vulnerability in Adobe Commerc

Reporter	Title	Published	Views	Family All 57
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	13 Aug 202407:33	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	30 Jun 202416:49	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	19 Aug 202419:25	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	27 Jun 202421:57	–	githubexploit
GithubExploit	Exploit for Code Injection in Geoserver	5 Jul 202415:24	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	28 Jun 202412:45	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	28 Jun 202414:50	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	1 Jul 202408:19	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	13 Aug 202407:33	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Aviatrix Controller	12 Jan 202511:20	–	githubexploit

Vulners

Node

magento community-editionRange2.4.5-p1–2.4.5-p8composer

magento community-editionRange2.4.6-p1–2.4.6-p6composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-34102
helpx	www.helpx.adobe.com/security/products/magento/apsb24-40.html
github	www.github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
github	www.github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
github	www.github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
github	www.github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
vicarius	www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2024-34102.yaml
github	www.github.com/advisories/GHSA-m8cj-3v68-3cxj

17 Jul 2024 19:15Current

7.4High risk

Vulners AI Score7.4

CVSS 3.19.8

EPSS0.94171

SSVC