| Package | Affected versions | Patched versions |
|---|---|---|
| lobster pro | < 4.12.6-ga | 4.12.6-ga |
Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free