CVE-2024-55875

Summary

CVE-2024-55875 is a newly identified vulnerability affecting the http4k library for Kotlin HTTP applications. Before version 5.41.0.0, this toolkit was susceptible to XML External Entity Injection (XXE), a type of cybersecurity vulnerability. When handling malicious XML content within requests, http4k might inadvertently expose local sensitive information, trigger Server-side Request Forgery, or even execute code. Version 5.41.0.0 includes a patch to address this vulnerability, mitigating the associated risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.