We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-46802



Assignerjpcert
Reserved2023-10-27
Published2023-11-06
Updated2024-09-05

Description

e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configuration of the embedded XML parser. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

Problem types

XML external entities (XXE)

Product status

Version3.0.10 and earlier
affected

References

https://www.e-tax.nta.go.jp/topics/topics_20231102.htm

https://jvn.jp/en/jp/JVN14762986/

cve.org CVE-2023-46802

nvd.nist.gov CVE-2023-46802

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-46802
Subscribe to our newsletter to learn more about our work.