CVE-2023-22377

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-22377
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-22377.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-22377
Published
2023-02-15T00:00:00Z
Modified
2026-08-27T03:57:01Z
Severity
  • 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

Improper restriction of XML external entity reference (XXE) vulnerability exists in tsClinical Define.xml Generator all versions (v1.0.0 to v1.4.0) and tsClinical Metadata Desktop Tools Version 1.0.3 to Version 1.1.0. If this vulnerability is exploited, an attacker may obtain an arbitrary file which meets a certain condition by reading a specially crafted XML file.

Database specific 
{
    "cna_assigner": "jpcert",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22377.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "tsClinical Define.xml Generator all versions (v1.0.0 to v1.4.0) and tsClinical Metadata Desktop Tools Version 1.0.3 to Version 1.1.0"
                },
                {
                    "last_affected": "tsClinical Define.xml Generator all versions (v1.0.0 to v1.4.0) and tsClinical Metadata Desktop Tools Version 1.0.3 to Version 1.1.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/tsClinical-OSS-Community/tsc-desktop

Affected ranges

Type
GIT
Repo
https://github.com/tsClinical-OSS-Community/tsc-desktop
Events
Introduced
12efb4261d1d3ae3fd574692d9b9a0f095f0562c
Fixed
ddc15d5feb04347c09f07413dc8600b3603a4b7d
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:fujitsu:tsclinical_metadata_desktop_tools:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.0.3"
        },
        {
            "fixed": "1.1.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

1.*
1.0.3
1.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-22377.json"