CVEvulnerability

CVE-2023-5136

5.5 MEDIUM Published 2023-11-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-611, CWE-732

Description

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.

Affected configurations

• ni topografix data plugin 2023 • ni diadem 2014 • ni diadem 2015 • ni diadem 2017 • ni diadem 2018 • ni diadem 2019 • ni diadem 2020 • ni diadem 2021 • ni diadem 2022 • ni diadem 2023 • ni veristand 2013 • ni veristand 2014 • ni veristand 2015 • ni veristand 2016 • ni veristand 2017 • ni veristand 2018 • ni veristand 2019 • ni veristand 2020 • ni veristand 2021 • ni veristand 2023 • ni flexlogger 2018 • ni flexlogger 2019 • ni flexlogger 2020 • ni flexlogger 2021 • ni flexlogger 2022 • ni flexlogger 2023

Related

Weakness · CWE (2)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness
  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References