CVEvulnerability

CVE-2019-17323

8.8 HIGH Published 2019-10-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-10-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-91

Description

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

Affected configurations

• clipsoft rexpert (<= 1.0.0.527)

Related

Weakness · CWE (1)

  • CWE-91 XML Injection weakness

References