medium5.5
CVE-2023-29498
Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier.
Impact
Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier. If a user opens a specially crafted project file, sensitive information on the system where the affected product is installed may be disclosed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fujielectric | Frenic Rhc Loader | through 1.1.0.3 |