Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•1 views

CVE-2024-55875: Exposure of Sensitive Information to an Unauthorized Actor

http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 6.50.0.0, there is a potential XXE XML External Entity Injection vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read local sensitive information on server,...

9.8CVSS5.9AI score0.01905EPSS
SaveExploits0References4
Rows per page
Query Builder