Actively exploited · Published Oct 18, 2023 · Assigned by jpcert
CVE-2023-45727
High 7.5 Exploited
In plain English
A high-severity XML external entity in Proself Enterprise/Standard Edition from North Grid Corporation. Attackers are actively exploiting it in the wild (listed by CISA on December 3, 2024). The chance it is exploited in the next 30 days is estimated at 4.8% (higher than 92% of all known vulnerabilities). Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Dec 24, 2024.
Official description
Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| North Grid Corporation | Proself Enterprise/Standard Edition | Ver5.62 and earlier |
| North Grid Corporation | Proself Gateway Edition | Ver1.65 and earlier |
| North Grid Corporation | Proself Mail Sanitize Edition | Ver1.08 and earlier |
Weakness: CWE-611 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N