Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubexploit6FCDF84F-2A9D-5035-B12E-F8EA26E9C20B
HistoryJul 01, 2024 - 8:19 a.m.

Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce

2024-07-0108:19:28
167
xxe vulnerability
adobe commerce
magento
cve-2024-34102
remote code execution
unauthenticated access
api
data theft
service disruption

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.973

Percentile

99.9%

JSON

CosmicSting: critical unauthenticated XXE vulnerability in Ado…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

Related

thn 2
attackerkb 1
osv 16
veracode 1
githubexploit 19
vulnrichment 2
cisa_kev 1
cvelist 2
nvd 2
cve 2
packetstorm 2
nuclei 1
friendsofphp 1
metasploit 1
nessus 59
github 1
fedora 3
openvas 31
oraclelinux 7
debian 2
rocky 2
cloudfoundry 1
ibm 4
redhat 13
almalinux 3
cgr 1
debiancve 1
mageia 1
amazon 2
ubuntucve 1
ubuntu 3
wolfi 1
redhatcve 1
redos 1
slackware 1
f5 1
photon 3
cloudlinux 1
rapid7blog 1
gentoo 1
thn
thn
Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack
2024-06-26 04:24:00
Cisco Warns of Critical Flaw Affecting On-Prem Smart Software Manager
2024-07-18 06:01:00
attackerkb
attackerkb
CVE-2024-34102
2024-06-13 00:00:00
osv
osv
CVE-2024-34102
2024-06-13 09:15:10
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability
2024-06-13 09:31:00
BIT-magento-2024-34102
2024-06-17 07:26:33
veracode
veracode
XML External Entity (XXE) Injection
2024-06-14 05:45:18
githubexploit
githubexploit
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
2024-06-27 21:57:24
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
2024-08-19 19:25:48
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
2024-06-28 23:33:21
vulnrichment
vulnrichment
CVE-2024-34102 XXE can expose crypt key and other secrets granting full admin access
2024-06-13 09:04:56
CVE-2024-2961
2024-04-17 17:27:40
cisa_kev
cisa_kev
Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
2024-07-17 00:00:00
cvelist
cvelist
CVE-2024-34102 XXE can expose crypt key and other secrets granting full admin access
2024-06-13 09:04:56
CVE-2024-2961
2024-04-17 17:27:40
nvd
nvd
CVE-2024-34102
2024-06-13 09:15:10
CVE-2024-2961
2024-04-17 18:15:15
cve
cve
CVE-2024-34102
2024-06-13 09:15:10
CVE-2024-2961
2024-04-17 18:15:15
packetstorm
packetstorm
Adobe Commerce / Magento Open Source XML Injection / User Impersonation
2024-07-22 00:00:00
Magento XXE Unserialize Arbitrary File Read
2024-08-31 00:00:00
nuclei
nuclei
Adobe Commerce & Magento - CosmicSting
2024-06-25 17:15:09
friendsofphp
friendsofphp
Arbitrary Code Execution through Improper Restriction of XML External Entity Reference (XXE) vulnerability
2024-06-11 14:03:00
metasploit
metasploit
Magento XXE Unserialize Arbitrary File Read
2024-07-17 16:47:02
nessus
nessus
Magento XXE (CVE-2024-34102)
2024-08-28 00:00:00
Oracle Linux 8 : glibc (ELSA-2024-2722)
2024-05-09 00:00:00
Rocky Linux 8 : glibc (RLSA-2024:2722)
2024-05-09 00:00:00
github
github
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability
2024-06-13 09:31:00
fedora
fedora
[SECURITY] Fedora 39 Update: glibc-2.38-18.fc39
2024-04-20 01:03:48
[SECURITY] Fedora 38 Update: glibc-2.37-19.fc38
2024-04-20 02:14:54
[SECURITY] Fedora 40 Update: glibc-2.39-8.fc40
2024-04-19 21:42:21
openvas
openvas
Ubuntu: Security Advisory (USN-6737-1)
2024-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1375-1)
2024-05-07 00:00:00
Fedora: Security Advisory for glibc (FEDORA-2024-f7ae5df88d)
2024-05-27 00:00:00
oraclelinux
oraclelinux
glibc security update
2024-05-08 00:00:00
glibc security update
2024-05-29 00:00:00
glibc security update
2024-06-19 00:00:00
debian
debian
[SECURITY] [DSA 5673-1] glibc security update
2024-04-23 07:11:00
[SECURITY] [DLA 3807-1] glibc security update
2024-05-03 22:50:16
rocky
rocky
glibc security update
2024-05-09 18:50:30
glibc security update
2024-06-14 14:00:33
cloudfoundry
cloudfoundry
USN-6737-1: GNU C Library vulnerability | Cloud Foundry
2024-05-23 00:00:00
ibm
ibm
Security Bulletin: IBM Storage Ceph is vulnerable to an Out-of-bounds Write in the RHEL UBI (CVE-2024-2961)
2024-08-05 22:01:35
Security Bulletin: A vulnerability in glibc affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products
2024-09-24 09:04:01
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2024-09-03 17:51:10
redhat
redhat
(RHSA-2024:3269) Important: glibc security update
2024-05-22 10:41:25
(RHSA-2024:2722) Important: glibc security update
2024-05-07 06:32:28
(RHSA-2024:4126) Important: Red Hat Service Interconnect 1.4.5 Release security update
2024-06-26 13:54:29
almalinux
almalinux
Important: glibc security update
2024-05-22 00:00:00
Important: glibc security update
2024-05-07 00:00:00
Important: glibc security update
2024-05-23 00:00:00
cgr
cgr
CVE-2024-2961 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
CVE-2024-2961
2024-04-17 18:15:15
mageia
mageia
Updated glibc packages fix security vulnerabilitiy
2024-04-25 19:00:30
amazon
amazon
Important: glibc
2024-04-24 22:15:00
Important: glibc
2024-04-25 16:04:00
ubuntucve
ubuntucve
CVE-2024-2961
2024-04-17 00:00:00
ubuntu
ubuntu
GNU C Library vulnerability
2024-04-29 00:00:00
GNU C Library vulnerability
2024-04-18 00:00:00
GNU C Library vulnerabilities
2024-05-02 00:00:00
wolfi
wolfi
CVE-2024-2961 vulnerabilities
2024-10-01 09:27:37
redhatcve
redhatcve
CVE-2024-2961
2024-04-18 04:53:08
redos
redos
ROS-20240503-10
2024-05-03 00:00:00
slackware
slackware
[slackware-security] glibc
2024-04-18 19:23:18
f5
f5
K000140901: glibc vulnerability CVE-2024-2961
2024-08-30 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0250
2024-04-18 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0750
2024-04-18 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0594
2024-04-18 00:00:00
cloudlinux
cloudlinux
glibc: Fix of 2 CVEs
2024-06-06 17:21:49
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 07/26/2024
2024-07-26 18:07:13
gentoo
gentoo
glibc: Multiple Vulnerabilities
2024-05-06 00:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.973

Percentile

99.9%

JSON
Related for 6FCDF84F-2A9D-5035-B12E-F8EA26E9C20B
thn2attackerkb1osv16veracode1githubexploit19vulnrichment2cisa_kev1cvelist2nvd2cve2packetstorm2nuclei1friendsofphp1metasploit1nessus59github1fedora3openvas31oraclelinux7debian2rocky2cloudfoundry1ibm4redhat13almalinux3cgr1debiancve1mageia1amazon2ubuntucve1ubuntu3wolfi1redhatcve1redos1slackware1f51photon3cloudlinux1rapid7blog1gentoo1