CVE-2024-6893

7.5 highEPSS 33%

High (7.5) in journyx journyx. EPSS 33% chance of exploitation in the next 30 days.

The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 33% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2024-08-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

journyx:journyx

References

https://korelogic.com/Resources/Advisories/KL-001-2024-010.txt
http://seclists.org/fulldisclosure/2024/Aug/8

Check your stack JSON