Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-22377

Improper restriction of XML external entity reference (XXE) vulnerability exists in tsClinical Define.xml Generator all versions (v1.0.0 to v1.4.0) and tsClinical Metadata Desktop Tools Version 1.0.3 to Version 1.1.0. If this vulnerability is exploited, an attacker may obtain an arbitrary file which meets a certain condition by reading a specially crafted XML file.

Published

2023-02-15T01:15:10.623

Last Modified

2025-03-19T18:15:19.503

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.4 (HIGH)

Weaknesses
  • Type: Primary
    CWE-611
  • Type: Secondary
    CWE-611
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fujitsu tsclinical_define.xml_generator ≤ 1.4.0 Yes
Application fujitsu tsclinical_metadata_desktop_tools < 1.1.1 Yes
References