Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-25955 EUVD-2023-29843GHSA-77m5-rm2p-m2qh

National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By process…

Published Apr 11, 2023 · Updated Feb 10, 2025 · Assigned by jpcert

Vendor: Ministry of Land, Infrastructure, Transport and Tourism, Japan Product: National land numerical information data conversion tool

Description

National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.

Affected products

VendorProductAffectedFixed
Ministry of Land, Infrastructure, Transport and Tourism, Japan National land numerical information data conversion tool all versions —

References