Medium severity5.5NVD Advisory· Published Jan 24, 2024· Updated Jun 17, 2026
CVE-2024-22380
CVE-2024-22380
Description
Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version) March, Heisei 31 era edition Ver.14.0.001.002 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:maff:electronic_delivery_check_system:*:*:*:*:heisei_31_era:*:*:*Range: <=14.0.001.002
- Range: <=March, Heisei 31 era edition Ver.14.0.001.002
- Ministry of Agriculture, Forestry and Fisheries/Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version) March, Heisei 31 era editionv5Range: Ver.14.0.001.002 and earlier
Patches
Vulnerability mechanics
References
2- jvn.jp/en/jp/JVN01434915/nvdThird Party Advisory
- www.maff.go.jp/j/nousin/seko/nouhin_youryou/densi.htmlnvdRelease Notes
News mentions
0No linked articles in our index yet.