JVN#75742861: Improper restriction of XML external entity references (XXE) in National land numerical information data conversion tool

National land numerical information data conversion tool provided by MLIT improperly restricts XML external entity references (XXE) (CWE-611).

Impact

By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.

Solution

Stop using the product
The developer states that the product is no longer publicly available, and recommends users to stop using the product.

Products Affected

• National land numerical information data conversion tool, all versions