Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 30, 2026 · NIST NVD

   Detected

   Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.

2. Jun 17, 2026 · NIST NVD

   Updated

   Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.

Affected

• cpe lobster-world/lobster proversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2024-13971

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2024-13971

  Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.

  nvd.nist.gov

References

• Reference · seclists.org
• Exploit · schutzwerk.com