medium5.5
CVE-2023-25955
National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE).
Impact
National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mlit | National Land Numerical Information Data Conversion Tool | All versions |