VULNERABILITY INTELLIGENCE

CVE-2024-13971

CVSS score7.5 HIGH
EPSS probability0.47%
CISA KEVNot currently listed
Published2026-04-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.

Weakness classification

  • 23637b5d-af4c-4cf9-b8f6-deb7fd0f8423: CWE-611

Primary references