Skip to content
OpenAdvisories
Medium · 6.8 CVE-2023-1288 EUVD-2023-23553GHSA-j343-8c44-p9w7

ENOVIA Live Collaboration V6R2013xE is affected by an XML External Entity injection (XXE) vulnerability

Published Mar 9, 2023 · Updated Feb 27, 2025 · Assigned by 3DS

Vendor: Dassault Systèmes Product: ENOVIA Live Collaboration

Description

An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server.

Affected products

VendorProductAffectedFixed
Dassault Systèmes ENOVIA Live Collaboration V6R2013xE Golden – ≤ V6R2013xE FP.CFA.2228 —

References