CVE-2024-13971

HIGH 7.5CVE-2024-13971 · Published 30/04/2026 · updated 17/06/2026

In short

CVE-2024-13971 is a HIGH (CVSS 7.5) vulnerability affecting lobster pro (lobster-world).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 40.9% of all vulnerabilities.
Fix: update to 4.12.6-ga or later.

Package	Affected versions	Patched versions
lobster pro lobster-world	`< 4.12.6-ga`	`4.12.6-ga`

Description

Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.

References

schutzwerk.com/en/blog/schutzwerk-sa-2024-005 · Exploit
seclists.org/fulldisclosure/2026/May/1

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free