XML External Entity Vulnerability in tsClinical Define.xml Generator and Metadata Tools

CVE-2023-22377

What is CVE-2023-22377?

An improper restriction of XML external entity reference vulnerability has been identified in the tsClinical Define.xml Generator and Metadata Desktop Tools. This vulnerability allows attackers to exploit specially crafted XML files to access arbitrary files on the system, potentially leading to sensitive information disclosure. This issue affects all versions of the Define.xml Generator up to v1.4.0 and versions 1.0.3 to 1.1.0 of the Metadata Desktop Tools. It is critical for users to review and address this vulnerability to safeguard their systems.

References