Vulnerability Details CVE-2023-52239
The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.0%
CVSS Severity
CVSS v3 Score 6.5
References
- https://ds-security.com/post/xml_external_entity_injection_magic_xpi/
- https://www2.magicsoftware.com/ver/docs/Downloads/Magicxpi/4.14/Windows/ReleaseNotes4.14.pdf
- https://ds-security.com/post/xml_external_entity_injection_magic_xpi/
- https://www2.magicsoftware.com/ver/docs/Downloads/Magicxpi/4.14/Windows/ReleaseNotes4.14.pdf
Products affected by CVE-2023-52239
-
cpe:2.3:a:magicsoftware:magic_xpi_integration_platform:4.13.4