Lucene search
6320F5A1-38C8-5459-83CC-85FC8857B606HistoryJul 13, 2024 - 5:31 p.m.
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
2024-07-1317:31:10
169
cosmicsting
python
xxe
vulnerability
exploitation
multi-threading
sensitive files
ssrf
api
dependency
installation
callback url
dtd file
request
xml
http
post
payload
acknowledgment
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.973
Percentile
99.9%
CosmicSting CVE-2024-34102 Exploit
Overview
CosmicSting is…
This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.
Related
osv
osv
CVE-2024-34102
2024-06-13 09:15:10
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability
2024-06-13 09:31:00
BIT-magento-2024-34102
2024-06-17 07:26:33
veracode
veracode
XML External Entity (XXE) Injection
2024-06-14 05:45:18
githubexploit
githubexploit
vulnrichment
vulnrichment
cisa_kev
cisa_kev
cvelist
cvelist
nvd
nvd
CVE-2024-34102
2024-06-13 09:15:10
cve
cve
CVE-2024-34102
2024-06-13 09:15:10
nessus
nessus
Magento XXE (CVE-2024-34102)
2024-08-28 00:00:00
github
github
nuclei
nuclei
Adobe Commerce & Magento - CosmicSting
2024-06-25 17:15:09
packetstorm
packetstorm
Magento XXE Unserialize Arbitrary File Read
2024-08-31 00:00:00
Adobe Commerce / Magento Open Source XML Injection / User Impersonation
2024-07-22 00:00:00
friendsofphp
friendsofphp
metasploit
metasploit
Magento XXE Unserialize Arbitrary File Read
2024-07-17 16:47:02
thn
thn
Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack
2024-06-26 04:24:00
Cisco Warns of Critical Flaw Affecting On-Prem Smart Software Manager
2024-07-18 06:01:00
attackerkb
attackerkb
CVE-2024-34102
2024-06-13 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 07/26/2024
2024-07-26 18:07:13
adobe
adobe
APSB24-40 : Security update available for Adobe Commerce
2024-06-11 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.973
Percentile
99.9%
Related for 6320F5A1-38C8-5459-83CC-85FC8857B606