XML External Entity Processing Vulnerability in Shinseiyo Sogo Soft

CVE-2023-27527

What is CVE-2023-27527?

Shinseiyo Sogo Soft (7.9A) and earlier versions have a vulnerability that allows improper handling of XML external entity references (XXE). This flaw enables attackers to craft malicious XML files that, when processed by affected systems, can lead to unauthorized access to local files. By exploiting this vulnerability, an attacker can potentially read sensitive data stored on the user's machine, posing a significant security threat to users of the affected software.

References