CVE-2023-45727

🗓️ 18 Oct 2023 09:01:12Reported by jpcertType

Proself products vulnerable to remote unauthenticated XXE attacks

Reporter	Title	Published	Views	Family All 22
ATTACKERKB	CVE-2023-45727	18 Oct 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of the Proself Enterprise/Standard Edition, Proself Gateway Edition, and Proself Mail Sanitize Edition software lies in the improper limitation of XML references to external objects. This allows attackers to carry out XXE attacks.	25 Apr 202500:00	–	bdu_fstec
Circl	CVE-2023-45727	18 Oct 202314:33	–	circl
CISA KEV Catalog	North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability	3 Dec 202400:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	3 Dec 202412:00	–	cisa
CNNVD	Proself Code Issue Vulnerability	18 Oct 202300:00	–	cnnvd
CVE	CVE-2023-45727	18 Oct 202309:01	–	cve
Japan Vulnerability Notes	JVN#95981460: Improper restriction of XML external entity references (XXE) in Proself	18 Oct 202300:00	–	jvn
Japan Vulnerability Notes	Improper restriction of XML external entity references (XXE) in Proself	18 Oct 202309:00	–	jvn
Tenable Nessus	NorthGrid Proself XXE (CVE-2023-45727)	9 Jul 202500:00	–	nessus

[
  {
    "vendor": "North Grid Corporation",
    "product": "Proself Enterprise/Standard Edition",
    "versions": [
      {
        "version": "Ver5.62 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "North Grid Corporation",
    "product": "Proself Gateway Edition",
    "versions": [
      {
        "version": "Ver1.65 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "North Grid Corporation",
    "product": "Proself Mail Sanitize Edition",
    "versions": [
      {
        "version": "Ver1.08 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/jp/JVN95981460/
proself	www.proself.jp/information/153/

18 Oct 2023 09:01Current

7.7High risk

Vulners AI Score7.7

EPSS0.03542