CVE-2023-45727highunder attackCWE-611

CVE-2023-45727: high-severity vulnerability in North Grid Corporation Proself…

Published · Updated

Follow this CVE+ Monitor Proself Enterprise/Standard+ Monitor Proself Gateway

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

51Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.5epss 4.8%
from disclosure to weapon
Published on NVDOct 18
CISA KEV+412d
Action required by CISAfederal deadline: 2024-12-24

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

A vulnerability in Proself allows attackers to read sensitive files from the server by sending specially crafted XML requests. This is dangerous because account information and other confidential data stored on the server can be exposed without authentication.

Technical detail

XML External Entity (XXE) injection vulnerability in Proself Enterprise/Standard (≤5.62), Gateway (≤1.65), and Mail Sanitize (≤1.08) editions allows unauthenticated remote attackers to read arbitrary server files through malformed XML processing. The attack requires no prior authentication and can extract files containing account credentials and sensitive data.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
North Grid Corporation · Proself Enterprise/Standard EditionNorth Grid Corporation · Proself Gateway EditionNorth Grid Corporation · Proself Mail Sanitize Edition
Related CVEs — North Grid Corporation Proself…

In the same product, most dangerous first.

CVE-2023-39416—CVE-2023-39416EPSS 1.2%CVE-2023-39415—CVE-2023-39415EPSS 1.0%