Converting the version string

The version string needs to be converted to a Rex::Version object in order for the two values to be compared successfully.

Author: heyder

modules/exploits/multi/http/magento_xxe_cve_2024_34102.rb

@@ -67,6 +67,8 @@ def check
     # Magento/2.4 (Community)
     version, edition = res.body.scan(%r{Magento/([\d.]+) \(([^)]+)\)}).first
 
+    version = Rex::Version.new(version)
+
     return CheckCode::Safe("Detected Magento #{edition} edition version #{version} which is not vulnerable") unless
       version <= (Rex::Version.new('2.4.7')) ||
       version <= (Rex::Version.new('2.4.6-p5')) ||