Lucene search
92CD344F-4570-5179-AE38-1F388226FED4HistoryJul 03, 2024 - 9:47 p.m.
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
2024-07-0321:47:28
143
adobe commerce
ssrf vulnerability
arbitrary code execution
crafted xml document
external entities
exploitation
user interaction
repository
required packages
target url
file to read
proxy
dtd file
ssrf api
malicious request
instance logs
exfiltrated data
vulnerable url
educational purposes
permission
credits
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.973
Percentile
99.9%
🚨 CVE-2024-34102 Exploit Script 🚨
Description
This script…
This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.
Related
osv
osv
CVE-2024-34102
2024-06-13 09:15:10
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability
2024-06-13 09:31:00
BIT-magento-2024-34102
2024-06-17 07:26:33
veracode
veracode
XML External Entity (XXE) Injection
2024-06-14 05:45:18
githubexploit
githubexploit
vulnrichment
vulnrichment
cisa_kev
cisa_kev
cvelist
cvelist
nvd
nvd
CVE-2024-34102
2024-06-13 09:15:10
cve
cve
CVE-2024-34102
2024-06-13 09:15:10
nessus
nessus
Magento XXE (CVE-2024-34102)
2024-08-28 00:00:00
github
github
packetstorm
packetstorm
Adobe Commerce / Magento Open Source XML Injection / User Impersonation
2024-07-22 00:00:00
Magento XXE Unserialize Arbitrary File Read
2024-08-31 00:00:00
nuclei
nuclei
Adobe Commerce & Magento - CosmicSting
2024-06-25 17:15:09
metasploit
metasploit
Magento XXE Unserialize Arbitrary File Read
2024-07-17 16:47:02
friendsofphp
friendsofphp
thn
thn
Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack
2024-06-26 04:24:00
Cisco Warns of Critical Flaw Affecting On-Prem Smart Software Manager
2024-07-18 06:01:00
attackerkb
attackerkb
CVE-2024-34102
2024-06-13 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 07/26/2024
2024-07-26 18:07:13
adobe
adobe
APSB24-40 : Security update available for Adobe Commerce
2024-06-11 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.973
Percentile
99.9%
Related for 92CD344F-4570-5179-AE38-1F388226FED4