CVE-2023-52239

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52239
The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://ds-security.com/post/xml_external_entity_injection_magic_xpi/ Exploit Third Party Advisory
https://www2.magicsoftware.com/ver/docs/Downloads/Magicxpi/4.14/Windows/ReleaseNotes4.14.pdf Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:magicsoftware:magic_xpi_integration_platform:4.13.4:*:*:*:*:*:*:*
History

13 Feb 2024, 22:50

Type Values Removed Values Added
CWE CWE-611
References () https://ds-security.com/post/xml_external_entity_injection_magic_xpi/ - () https://ds-security.com/post/xml_external_entity_injection_magic_xpi/ - Exploit, Third Party Advisory
References () https://www2.magicsoftware.com/ver/docs/Downloads/Magicxpi/4.14/Windows/ReleaseNotes4.14.pdf - () https://www2.magicsoftware.com/ver/docs/Downloads/Magicxpi/4.14/Windows/ReleaseNotes4.14.pdf - Release Notes, Vendor Advisory
First Time Magicsoftware magic Xpi Integration Platform
Magicsoftware
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CPE cpe:2.3:a:magicsoftware:magic_xpi_integration_platform:4.13.4:*:*:*:*:*:*:*

06 Feb 2024, 13:53

Type Values Removed Values Added
Summary
  • (es) El analizador XML en Magic xpi Integration Platform 4.13.4 permite ataques XXE, por ejemplo, a través de onItemImport.

06 Feb 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-06 07:15

Updated : 2024-02-13 22:50

NVD link : CVE-2023-52239

Mitre link : CVE-2023-52239

CVE.ORG link : CVE-2023-52239

JSON object : View

Products Affected

magicsoftware

  • magic_xpi_integration_platform
CWE
CWE-611

Improper Restriction of XML External Entity Reference