VulnSocial

CVE-2024-13971Disclosure(lobster-world / lobster_pro)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch lobster-world lobster_pro systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.

lobster-world CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-611

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • lobster_pro

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-04-30); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
lobster-world
Products
lobster_pro

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-30: 2Mentions · 2026-05-29: 1Patch / Workaround · 2026-05-29: 1Technical Details · 2026-04-30: 2Technical Details · 2026-05-29: 104-3005-29
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-04-302
Disclosure2
2026-05-291
Patch1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2024-13971 Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to … https://www.cve.org/CVERecord?id=CVE-2024-13971

    Post summary

    CVE-2024-13971 exposes unauthenticated read access via an XML parser flaw in Lobster_pro before version 4.12.6‑GA; no PoC, exploit, or patch details are provided.

    00010163
    57.3K followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2024-13971 (CVSS 7.5) Lobster_pro <4.12.6-GA vulnerable to unauthenticated XXE attacks. Attackers can read server files & network shares, perform arbitrary HTTP requests. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/UQ1MxmqiAU

    Post summary

    The tweet alerts users to CVE-2024-13971, a high‑severity unauthenticated XXE vulnerability (CVSS 7.5) that can read server files, network shares, and perform arbitrary HTTP requests, and urges a prompt patch.

    0000029
    31 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2024-13971 Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to … https://www.cve.org/CVERecord?id=CVE-2024-13971 ----- Traducción: CVE-2024-13971 Ata… http://infoflow.cloud`

    Post summary

    The text announces CVE-2024-13971, detailing a weakness in Lobster_pro’s XML parser that permits unauthenticated read access, but it does not provide PoC, exploit code, active exploitation evidence, or remediation guidance.

    0000026
    74 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Applobster-worldlobster_pro---

Explore more

Back to dashboardlobster-world CVEslobster_pro vulnerabilities