CVE-2023-37200
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.
Risk Assessment
The organization may experience loss of confidential data, which could lead to serious legal and reputational consequences.
Recommendation
It is recommended to implement appropriate security measures to restrict access to XML external entities and to monitor and control processes related to project files.
Original NVD description (English source)
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.