Shinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2023-05-10T00:00:00

Updated: 2024-08-02T12:16:35.682Z

Reserved: 2023-03-15T00:00:00

Link: CVE-2023-27527

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-05-10T06:15:13.953

Modified: 2024-11-21T07:53:06.160

Link: CVE-2023-27527

cve-icon Redhat

No data.