https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T05:46:02.031230+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-6893 CVE-2024-6893 — Journyx Unauthenticated XML External Entities Injection 2026-10-07T05:46:02.047350+00:00

Affected: Journyx (jtime), journyx

The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources.