CVE-2023-29498

2023-06-1300:00:00

jpcert

www.cve.org

xml

xxe

frenic rhc loader

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

24.0%

JSON

Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier. If a user opens a specially crafted project file, sensitive information on the system where the affected product is installed may be disclosed.

CNA Affected

[
  {
    "vendor": "FUJI ELECTRIC CO., LTD.",
    "product": "FRENIC RHC Loader",
    "versions": [
      {
        "version": "v1.1.0.3 and earlier",
        "status": "affected"
      }
    ]
  }
]