Vulnerability Details CVE-2023-27527
Shinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.5%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2023-27527
-
cpe:2.3:a:touki-kyoutaku-online:shinseiyo_sogo_soft:-
-
cpe:2.3:a:touki-kyoutaku-online:shinseiyo_sogo_soft:7.9a