Medium severity5.5NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026
CVE-2023-25955
CVE-2023-25955
Description
National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:mlit:national_land_numerical_information_data_conversion_tool:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- jvn.jp/en/jp/JVN75742861/nvdThird Party AdvisoryVDB Entry
- nlftp.mlit.go.jp/i_news.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.