medium4.9
CVE-2023-43067
Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability.
Impact
Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Unity Operating Environment | before 5.3.0.0.5.120 |
| Dell | Unity Xt Operating Environment | before 5.3.0.0.5.120 |
| Dell | Unityvsa Operating Environment | before 5.3.0.0.5.120 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities