Vulnerabilities > CVE-2023-25955 - XXE vulnerability in Mlit National Land Numerical Information Data Conversion Tool
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |