CVE-2023-27527

Shinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE)

Low · published May 10, 2023

CVSS v3.1
2.5
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

Shinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.

The record
Technical detail
CVSS v3.1
2.5 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.5th percentile
Published
2023-05-10T00:00Z
EPSS history
Timeline
  • 10 MAY 00:00Z
    Shinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE)
    cvelistv5