Medium severity5.5NVD Advisory· Published Jan 24, 2024· Updated Jun 17, 2026
CVE-2024-21765
CVE-2024-21765
Description
Electronic Delivery Check System (Doboku) Ver.18.1.0 and earlier, Electronic Delivery Check System (Dentsu) Ver.12.1.0 and earlier, Electronic Delivery Check System (Kikai) Ver.10.1.0 and earlier, and Electronic delivery item Inspection Support SystemVer.4.0.31 and earlier improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:cals-ed:electronic_delivery_check_system:*:*:*:*:dentsu:*:*:*+ 2 more
- cpe:2.3:a:cals-ed:electronic_delivery_check_system:*:*:*:*:dentsu:*:*:*range: <13.0.0
- cpe:2.3:a:cals-ed:electronic_delivery_check_system:*:*:*:*:doboku:*:*:*range: <19.0.0
- cpe:2.3:a:cals-ed:electronic_delivery_check_system:*:*:*:*:mechanical:*:*:*range: <11.0.0
- cpe:2.3:a:cals-ed:electronic_delivery_item_inspection_support_system:*:*:*:*:*:*:*:*Range: <=4.0.31
- Range: <=18.1.0
Patches
Vulnerability mechanics
References
3- jvn.jp/en/jp/JVN77736613/nvdThird Party Advisory
- www.cals-ed.go.jp/checksys-release-20231130/nvdRelease Notes
- www.ysk.nilim.go.jp/cals/nvdProduct
News mentions
0No linked articles in our index yet.