Skip to content
NewA calmer, faster ZeroHour
Toolslow

Update modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb

Metasploit Framework commitsby kmkz ()1
Read at github.com
AI summary · glm-5.3-flashSummaries by Vani AI

Rapid7 updated a Metasploit auxiliary scanner module that detects XML external entity injection in Elasticsearch via Apache Tika.

A commit in the Metasploit Framework updated modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb, an auxiliary scanner module. The module targets XML external entity (XXE) injection in Elasticsearch through Apache Tika, and was co-authored by jheysel-r7. The terse commit message contains no additional details, CVE references, or exploitation notes.

Key facts
  • Update affects modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb, a scanner for XXE via Tika in Elasticsearch.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
apache-tikaelasticsearchmetasploitscanner-modulexxe
Vendors
Rapid7
Products
MetasploitElasticsearchApache Tika

From the original article

Update modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe. rb Co-authored-by: jheysel-r7

Metasploit Framework commits

By kmkz · github.com

Read the full article at Metasploit Framework commits

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.