medium6.5
CVE-2023-52239
The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport.
Impact
The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Magicsoftware | Magic Xpi Integration Platform | Version 4.13.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://ds-security.com/post/xml_external_entity_injection_magic_xpi/
- https://www2.magicsoftware.com/ver/docs/Downloads/Magicxpi/4.14/Windows/ReleaseNotes4.14.pdf
- https://ds-security.com/post/xml_external_entity_injection_magic_xpi/
- https://www2.magicsoftware.com/ver/docs/Downloads/Magicxpi/4.14/Windows/ReleaseNotes4.14.pdf