Vulnerabilities
Report: CVE-2024-13971 - Arbitrary File Read and Server Side Request Forgery via XML External Entities in
CVE ID :CVE-2024-13971 Published : April 30, 2026, 12:11 p.m. | 1 hour ago Description :Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services. Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...