Skip to content

Commit 55e825b

Browse files
heyderjheysel-r7
andauthored
Update modules/auxiliary/gather/magento_xxe_cve_2024_34102.rb
Co-authored-by: jheysel-r7 <[email protected]>
1 parent 400e628 commit 55e825b

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

modules/auxiliary/gather/magento_xxe_cve_2024_34102.rb

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -150,6 +150,10 @@ def xxe_request
150150
end
151151

152152
def run
153+
if datastore['SRVHOST'] == '0.0.0.0' or datastore['SRVHOST'] == "::"
154+
fail_with(Failure::BadConfig, 'SRVHOST must be set to an IP address (0.0.0.0 is invalid) for exploitation to be successful')
155+
end
156+
153157
if datastore['SSL']
154158
ssl_restore = true
155159
datastore['SSL'] = false

0 commit comments

Comments
 (0)