exploit-CVE-2023-38490

Kirby XML 외부 엔티티 XXE - CVE-2023-38490 익스플로잇 Kirby 3.9.6 XML 외부 엔티티 다음 취약점에 대한 익스플로잇: CVE-2023-38490 / GHSA-q386-w6fg-gmgp. 익스플로잇 시연 취약한 데모 앱 빌드 및 실행: root@kitploit: cd docker docker buildx build -t kirby-starterkit-3.9.5 . docker run -d --rm -p 127.0.0.2:1337:80/tcp --name CVE-2023-38490...

CVE-2023-38490

Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 only affects Kirby sites that use the Xml data handler e.g. Data::decode$string, 'xml' or the Xml::parse method in site or plugin code. The Kirby core does not use any of the...

CVE-2023-38490 Kirby XML External Entity (XXE) vulnerability in the XML data handler

Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 only affects Kirby sites that use the Xml data handler e.g. Data::decode$string, 'xml' or the Xml::parse method in site or plugin code. The Kirby core does not use any of the...