Vulnerabilidades de Lobster-world
CVEs publicadas que afetam produtos de Lobster-world: 1 registro(s), com severidade, exploração e correções.
CVE-2024-13971
Alta · 7.5
CWE-611 30/04/2026
Arbitrary File Read and Server Side Request Forgery via XML External Entities in Lobster_pro
Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.