Electronic Deliverables Creation Support Tool

electronic_deliverables_creation_support_tool

Vendor: Dfeg • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2024-21796

1Dfeg

1Electronic Deliverables Creation Support Tool

Nov 21, 2024

Jan 24, 2024

N/A· v4

5.5 MEDIUM· v3

N/A· v2

Electronic Deliverables Creation Support Tool (Construction Edition) prior to Ver1.0.4 and Electronic Deliverables Creation Support Tool (Design & Survey Edition) prior to Ver1.0.4 improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.Show less