Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) ยท updates https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102 Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution. Added to the CISA KEV catalog on 2024-07-17. en Wed, 17 Jul 2024 00:00:00 GMT Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE): CISA added CVE-2024-34102 to the KEV catalog (federal deadline 2024-08-07) https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102 https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102#2024-07-17-704339dc Wed, 17 Jul 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE): CVE-2024-34102 published https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102 https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102#2024-06-13-a7f3119d Thu, 13 Jun 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-34102">Source</a></p>