Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce

🗓️ 03 Jul 2024 21:28:47Type

This script exploits a Server-Side Request Forgery (SSRF) vulnerability in Adobe Commerce versions 2.4.7 and earlier, allowing arbitrary code execution via crafted XML document referencing external entities. Exploitation requires no user interaction

Reporter	Title	Published	Views	Family All 118
Cvelist	CVE-2024-34102 XXE can expose crypt key and other secrets granting full admin access	13 Jun 202409:04	–	cvelist
NVD	CVE-2024-34102	13 Jun 202409:15	–	nvd
CVE	CVE-2024-34102	13 Jun 202409:15	–	cve
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	13 Aug 202407:33	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	13 Jul 202417:31	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	13 Jul 202410:25	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	19 Aug 202419:25	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	27 Jun 202421:57	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	13 Aug 202407:33	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	7 Jul 202423:35	–	githubexploit

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo