Update modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb
AI summary · glm-5.3-flash
Rapid7 updated a Metasploit auxiliary scanner module that detects XML external entity injection in Elasticsearch via Apache Tika.
A commit in the Metasploit Framework updated modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb, an auxiliary scanner module. The module targets XML external entity (XXE) injection in Elasticsearch through Apache Tika, and was co-authored by jheysel-r7. The terse commit message contains no additional details, CVE references, or exploitation notes.
- Update affects modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb, a scanner for XXE via Tika in Elasticsearch.
VendorsRapid7
Full article
Update modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb Co-authored-by: jheysel-r7
This source does not provide full text. Read it at github.com.