Description
Shinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.
Published: 2023-05-10
Score: 2.5 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-31284 Shinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.
History

Tue, 28 Jan 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

cvssV3_1

{'score': 2.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N'}

Subscriptions

Touki-kyoutaku-online Shinseiyo Sogo Soft
cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published:

Updated: 2025-01-28T14:19:39.693Z

Reserved: 2023-03-15T00:00:00.000Z

Link: CVE-2023-27527

cve-icon Vulnrichment

Updated: 2024-08-02T12:16:35.682Z

cve-icon NVD

Status : Modified

Published: 2023-05-10T06:15:13.953

Modified: 2025-01-28T15:15:10.947

Link: CVE-2023-27527

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses