Maple Labs

CVE search · CVE-2023-22377

CVE-2023-22377

high 7.4

Improper restriction of XML external entity reference (XXE) vulnerability exists in tsClinical Define.xml Generator all versions (v1.0.0 to v1.4.0) and tsClinical Metadata Desktop Tools Version 1.0.3 to Version 1.1.0. If this vulnerability is exploited, an attacker may obtain an arbitrary file which meets a certain condition by reading a specially crafted XML file.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
vultures@jpcert.or.jp
Weakness
CWE-611

Severity

VersionScoreVectorSource
CVSS 3.1 high 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N nvd@nist.govPrimary
CVSS 3.1 high 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • fujitsu · tsclinical_define.xml_generator
  • fujitsu · tsclinical_metadata_desktop_tools

References