CVE-2024-21765

Published: Jan 24, 2024Modified: Jun 20, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Electronic Delivery Check System (Doboku) Ver.18.1.0 and earlier, Electronic Delivery Check System (Dentsu) Ver.12.1.0 and earlier, Electronic Delivery Check System (Kikai) Ver.10.1.0 and earlier, and Electronic delivery item Inspection Support SystemVer.4.0.31 and earlier improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

Affected (4)

Products: Cals Ed: Electronic Delivery Check System, Electronic Delivery Item Inspection Support System

Cals Ed

2 products

Electronic Delivery Check System

Electronic Delivery Item Inspection Support System

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Cals Ed Electronic Delivery Check System	Before 13.0.0
Cals Ed Electronic Delivery Check System	Before 19.0.0
Cals Ed Electronic Delivery Check System	Before 11.0.0
Cals Ed Electronic Delivery Item Inspection Support System	Up to 4.0.31