National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/jp/JVN75742861/ | Third Party Advisory VDB Entry |
| https://nlftp.mlit.go.jp/i_news.html#news4 | Vendor Advisory |
| https://jvn.jp/en/jp/JVN75742861/ | Third Party Advisory VDB Entry |
| https://nlftp.mlit.go.jp/i_news.html#news4 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://jvn.jp/en/jp/JVN75742861/ - Third Party Advisory, VDB Entry | |
| References | () https://nlftp.mlit.go.jp/i_news.html#news4 - Vendor Advisory |
18 Apr 2023, 17:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://nlftp.mlit.go.jp/i_news.html#news4 - Vendor Advisory | |
| References | (MISC) https://jvn.jp/en/jp/JVN75742861/ - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:mlit:national_land_numerical_information_data_conversion_tool:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-611 | |
| First Time |
Mlit
Mlit national Land Numerical Information Data Conversion Tool |
11 Apr 2023, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-11 09:15
Updated : 2025-02-10 16:15
NVD link : CVE-2023-25955
Mitre link : CVE-2023-25955
CVE.ORG link : CVE-2023-25955
JSON object : View
Products Affected
mlit
- national_land_numerical_information_data_conversion_tool
CWE
CWE-611
Improper Restriction of XML External Entity Reference