CVEvulnerability
CVE-2023-49234
6.3 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2024-03-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.3 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-611
Description
An XML external entity (XXE) vulnerability was found in Stilog Visual Planning 8. It allows an authenticated attacker to access local server files and exfiltrate data to an external server.
Related
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness
References
- http://seclists.org/fulldisclosure/2024/Apr/3 seclists.org
- https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-006.txt www.schutzwerk.com
- https://www.schutzwerk.com/blog/schutzwerk-sa-2023-006/ www.schutzwerk.com
- https://www.visual-planning.com/en/support-portal/updates www.visual-planning.com
- http://seclists.org/fulldisclosure/2024/Apr/3 seclists.org
- https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-006.txt www.schutzwerk.com
- https://www.schutzwerk.com/blog/schutzwerk-sa-2023-006/ www.schutzwerk.com
- https://www.visual-planning.com/en/support-portal/updates www.visual-planning.com