National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/jp/JVN75742861/ | Third Party Advisory VDB Entry |
| https://nlftp.mlit.go.jp/i_news.html#news4 | Vendor Advisory |
| https://jvn.jp/en/jp/JVN75742861/ | Third Party Advisory VDB Entry |
| https://nlftp.mlit.go.jp/i_news.html#news4 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://jvn.jp/en/jp/JVN75742861/ - Third Party Advisory, VDB Entry | |
| References | () https://nlftp.mlit.go.jp/i_news.html#news4 - Vendor Advisory |
Information
Published : 2023-04-11 09:15
Updated : 2024-11-21 07:50
NVD link : CVE-2023-25955
Mitre link : CVE-2023-25955
CVE.ORG link : CVE-2023-25955
JSON object : View
Products Affected
mlit
- national_land_numerical_information_data_conversion_tool
CWE
CWE-611
Improper Restriction of XML External Entity Reference