VDB
CVE-2024-34102
CVE-2024-34102
PUBLISHED
KEV
In Adobe Magento Open Source bestehen mehrere Schwachstellen. Diese Fehler sind auf verschiedene sicherheitsrelevante Probleme zurückzuführen, wie z.B. serverseitige Request Forgery, unsachgemäße Einschränkung von XML-Referenzen auf externe Entitäten, unsachgemäße Eingabevalidierung und Cross-Site Scripting. Ein entfernter, anonymer Angreifer kann diese Sicherheitslücken ausnutzen, um beliebigen Code auszuführen. Für einige der Sicherheitslücken sind erhöhte Rechte erforderlich.
EPSS 94.17% · 99.9th percentile
Risk Scores
EPSS Score
94.17%
99.9th percentile
Exploit Intelligence
- (crowdsec)
- Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability (github-poc-repo)
- Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability (github-poc-repo)
- Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability (github-poc-repo)
- Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability (github-poc-repo)
- Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability (github-poc-repo)
- Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability (github-poc-repo)
- Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability (github-poc-repo)
- Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability (github-poc-repo)
- Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability (github-poc-repo)
…and 476 more exploits
Timeline
- Dec 31, 2020 CrowdSec Sighting
- Jun 6, 2022 CrowdSec Sighting
- Sep 27, 2022 CrowdSec Sighting
- Oct 8, 2022 CrowdSec Sighting
- Oct 14, 2022 CrowdSec Sighting
- Nov 23, 2022 CrowdSec Sighting
- Dec 2, 2022 CrowdSec Sighting
- Dec 10, 2022 CrowdSec Sighting
- Mar 1, 2023 CrowdSec Sighting
- Mar 9, 2023 CrowdSec Sighting
- Apr 5, 2023 CrowdSec Sighting
- Jun 18, 2023 CrowdSec Sighting
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1361.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1361 advisory
- https://helpx.adobe.com/security/products/magento/apsb24-40.html advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit