exploit-CVE-2023-38490

Kirby XML External Entity XXE - CVE-2023-38490 эксплойт Kirby 3.9.6 XML-внешняя сущность Эксплойт для CVE-2023-38490 / GHSA-q386-w6fg-gmgp. Демонстрация эксплуатации Сборка и запуск уязвимого демо-приложения: root@kitploit: cd docker docker buildx build -t kirby-starterkit-3.9.5 . docker run -d...

CVE-2023-38490

Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 only affects Kirby sites that use the Xml data handler e.g. Data::decode$string, 'xml' or the Xml::parse method in site or plugin code. The Kirby core does not use any of the...

CVE-2023-38490 Kirby XML External Entity (XXE) vulnerability in the XML data handler

Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 only affects Kirby sites that use the Xml data handler e.g. Data::decode$string, 'xml' or the Xml::parse method in site or plugin code. The Kirby core does not use any of the...