Skip to content
OpenAdvisories

Vendor

Lobster

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.7

    Arbitrary File Read and Server Side Request Forgery via XML External Entities in Lobster_pro

    Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to…