ZeroHour
Metasploit Framework commitspublished ()ingested kmkz

Update modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb

lowToolsimportance 18
AI summary · glm-5.3-flash

Rapid7 updated a Metasploit auxiliary scanner module that detects XML external entity injection in Elasticsearch via Apache Tika.

A commit in the Metasploit Framework updated modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb, an auxiliary scanner module. The module targets XML external entity (XXE) injection in Elasticsearch through Apache Tika, and was co-authored by jheysel-r7. The terse commit message contains no additional details, CVE references, or exploitation notes.

  • Update affects modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb, a scanner for XXE via Tika in Elasticsearch.
Full article

Update modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb Co-authored-by: jheysel-r7

This source does not provide full text. Read it at github.com.