CVE-2023-46802

2023-11-0601:25:12

jpcert

github.com

e-tax

xml parser

vulnerability

cve-2023-46802

xxe

security

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configuration of the embedded XML parser. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.