Skip to content

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

CVE-2022-24449 — Solar Appscreener XXE | Kitploit

GitHub/jet-pentest/cve-2022-24449

Vulnerability Analysis Exploitation Web Application Exploitation Misconfiguration

jet-pentest/cve-2022-24449

CVE-2022-24449

Solar Appscreener XXE

View Repository

34 years ago

Most Popular

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Share

CVE-2022-24449

Solar Appscreener XXE [Suggested description] An issue was found in Solar AppScreener SAST tool through 3.10.4. An unauthorized actor, may exploit effected hosts where vulnerable version is installed, by uploading specially crafted XML files on hosts, which has an expired or non-installed license. The lowest approved impact is XXE-SSRF.

[Additional Information] Fixed in >3.10.4

[VulnerabilityType Other] CWE-611: Improper Restriction of XML External Entity Reference

[Vendor of Product] SOLAR SECURITY LLC ()

https://en.rt-solar.ru/

[Affected Product Code Base] Affected version: Solar Appscreener 3.10.4

[Affected Component] License update mechanism

[Attack Type] Remote

[Impact Code execution] true

[Impact Denial of Service] true

[Impact Escalation of Privileges] true

[Impact Information Disclosure] true

[Attack Vectors] An attacker able to upload specially crafted XML file via license update function

[Discoverer] Dmitry Kuramin (Jet Infosystems, jet.su)

[Reference] https://jet.su