FKIE_CVE-2023-45727

Vulnerability from fkie_nvd - Published: 2023-10-18 10:15 - Updated: 2026-06-17 06:29
Severity
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Summary
Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.
References
vultures@jpcert.or.jphttps://jvn.jp/en/jp/JVN95981460/Third Party Advisory
vultures@jpcert.or.jphttps://www.proself.jp/information/153/Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://jvn.jp/en/jp/JVN95981460/Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.proself.jp/information/153/Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45727US Government Resource
Impacted products
Vendor Product Version
northgrid proself *
northgrid proself *
northgrid proself *
northgrid proself *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Proself Enterprise/Standard Edition",
          "vendor": "North Grid Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Ver5.62 and earlier"
            }
          ]
        },
        {
          "product": "Proself Gateway Edition",
          "vendor": "North Grid Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Ver1.65 and earlier"
            }
          ]
        },
        {
          "product": "Proself Mail Sanitize Edition",
          "vendor": "North Grid Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Ver1.08 and earlier"
            }
          ]
        }
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:northgrid:proself:-:*:*:*:enterprise:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "proself",
          "vendor": "northgrid",
          "versions": [
            {
              "lessThanOrEqual": "5.62",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:northgrid:proself:-:*:*:*:gateway:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "proself",
          "vendor": "northgrid",
          "versions": [
            {
              "lessThanOrEqual": "1.65",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:northgrid:proself:-:*:*:*:standard:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "proself",
          "vendor": "northgrid",
          "versions": [
            {
              "lessThanOrEqual": "5.62",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:northgrid:proself:-:*:*:*:mail_sanitize:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "proself",
          "vendor": "northgrid",
          "versions": [
            {
              "lessThanOrEqual": "1.08",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "cisaActionDue": "2024-12-24",
  "cisaExploitAdd": "2024-12-03",
  "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
  "cisaVulnerabilityName": "North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:northgrid:proself:*:*:*:*:mail_sanitize:*:*:*",
              "matchCriteriaId": "6D6F51B5-6B83-41C4-A1F6-9D10CB601DB5",
              "versionEndExcluding": "1.09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:northgrid:proself:*:*:*:*:gateway:*:*:*",
              "matchCriteriaId": "F1BB1954-50C1-40A8-9F47-415ECBB6259F",
              "versionEndExcluding": "1.66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:northgrid:proself:*:*:*:*:enterprise:*:*:*",
              "matchCriteriaId": "66942ECC-2DB7-4B63-9364-FC7D71722355",
              "versionEndExcluding": "5.63",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:northgrid:proself:*:*:*:*:standard:*:*:*",
              "matchCriteriaId": "1ED1659B-802E-4F0F-9CF3-BD1BBED1A27F",
              "versionEndExcluding": "5.63",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker."
    },
    {
      "lang": "es",
      "value": "Proself Enterprise/Standard Edition Ver5.62 y anteriores, Proself Gateway Edition Ver1.65 y anteriores, y Proself Mail Sanitize Edition Ver1.08 y anteriores permiten a un atacante remoto no autenticado realizar ataques de entidad externa XML (XXE). Al procesar una solicitud especialmente manipulada que contiene datos XML con formato incorrecto, el atacante puede leer archivos arbitrarios en el servidor que contienen informaci\u00f3n de la cuenta."
    }
  ],
  "id": "CVE-2023-45727",
  "lastModified": "2026-06-17T06:29:25.203",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-45727",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-12-06T04:55:30.434626Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2023-10-18T10:15:08.643",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://jvn.jp/en/jp/JVN95981460/"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.proself.jp/information/153/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://jvn.jp/en/jp/JVN95981460/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.proself.jp/information/153/"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45727"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-611"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-611"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.