CVE-2024-6893

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-611

Affected software

VendorProductVersions
JournyxJournyx (jtime)11.5.4
journyxjournyx11.5.4

References

Timeline

Published
Aug 8, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-68945.4The RD Station plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.3.2 due to insufficCVE-2024-68956.1Insufficient authentication in user account management in Yugabyte Platform allows local network attackers with a compromised user session tCVE-2024-68965.4The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versCVE-2024-68976.4The aThemes Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and CVE-2024-68989.8A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affects an unknown part oCVE-2024-68999.8A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as critical. This vulnerability affects unknoCVE-2024-69008.8A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as critical. This issue affects some unknown proCVE-2024-69018.8A vulnerability classified as critical has been found in SourceCodester Record Management System 1.0. Affected is an unknown function of theCVE-2024-69028.8A vulnerability classified as critical was found in SourceCodester Record Management System 1.0. Affected by this vulnerability is an unknowCVE-2024-69038.8A vulnerability, which was classified as critical, has been found in SourceCodester Record Management System 1.0. Affected by this issue is CVE-2024-69048.8A vulnerability, which was classified as critical, was found in SourceCodester Record Management System 1.0. This affects an unknown part ofCVE-2024-69058.8A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as critical. This vulnerability affects unknown
CVE-2024-6893: High severity, CVSS 7.5 | Vulnix