We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-46802



Description

e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configuration of the embedded XML parser. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

Reserved 2023-10-27 | Published 2023-11-06 | Updated 2024-10-29 | Assigner jpcert

Problem types

XML external entities (XXE)

Product status

Version3.0.10 and earlier
affected

References

www.e-tax.nta.go.jp/topics/topics_20231102.htm

jvn.jp/en/jp/JVN14762986/

cve.org (CVE-2023-46802)

nvd.nist.gov (CVE-2023-46802)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-46802

Support options

Helpdesk Chat, Email, Knowledgebase
Subscribe to our newsletter to learn more about our work.