CVE-2023-41635
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to read any file in the filesystem via supplying a crafted XML file.
Risk Assessment
This vulnerability may lead to the exposure of sensitive data contained in system files, posing a serious threat to the organization's security.
Recommendation
It is recommended to update the software to the latest version that addresses this vulnerability and to review the XML handling configuration to minimize risk.
Original NVD description (English source)
A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to read any file in the filesystem via supplying a crafted XML file.