{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) · updates",
  "home_page_url": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102",
  "feed_url": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102/feed.json",
  "description": "Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution. Added to the CISA KEV catalog on 2024-07-17.",
  "language": "en",
  "_pwn": {
    "slug": "adobe-commerce-and-magento-open-source-cve-2024-34102",
    "severity": "critical",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102/feed.xml",
    "llms": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102/llms.txt",
    "json": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102#2024-07-17-704339dc",
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102#2024-07-17-704339dc",
      "title": "Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE): CISA added CVE-2024-34102 to the KEV catalog (federal deadline 2024-08-07)",
      "content_text": "Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE): CISA added CVE-2024-34102 to the KEV catalog (federal deadline 2024-08-07)\n\nSource: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "date_published": "2024-07-17T00:00:00.000Z",
      "external_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102#2024-06-13-a7f3119d",
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102#2024-06-13-a7f3119d",
      "title": "Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE): CVE-2024-34102 published",
      "content_text": "Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE): CVE-2024-34102 published\n\nSource: https://nvd.nist.gov/vuln/detail/CVE-2024-34102",
      "date_published": "2024-06-13T00:00:00.000Z",
      "external_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34102",
      "tags": [
        "critical"
      ]
    }
  ]
}