SAP Business One (B1i) - version 10.0, allows an authorized attacker to retrieve the details stack trace of the fault message to conduct the XXE injection, which will lead to information disclosure. After successful exploitation, an attacker can cause limited impact on the confidentiality and no impact to the integrity and availability.
Metrics
Affected Vendors & Products
References
History
Wed, 18 Sep 2024 19:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: sap
Published: 2023-10-10T01:35:57.645Z
Updated: 2024-09-18T18:57:11.519Z
Reserved: 2023-08-29T05:27:56.300Z
Link: CVE-2023-41365
Vulnrichment
Updated: 2024-08-02T19:01:35.302Z
NVD
Status : Analyzed
Published: 2023-10-10T02:15:10.777
Modified: 2023-10-11T19:10:23.687
Link: CVE-2023-41365
Redhat
No data.