CVE-2023-45727 (GCVE-0-2023-45727)
Vulnerability from cvelistv5
Published
2023-10-18 09:01
Modified
2025-07-30 01:37
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE
  • XML external entities (XXE)
Summary
Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.
References
Impacted products
Vendor Product Version
North Grid Corporation Proself Enterprise/Standard Edition Version: Ver5.62 and earlier
 Create a notification for this product.
CISA Known Exploited Vulnerability
Data from the CISA Known Exploited Vulnerabilities Catalog

Date added: 2024-12-03

Due date: 2024-12-24

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Used in ransomware: Unknown

Notes: https://www.proself.jp/information/153/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-45727

Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T20:29:32.421Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.proself.jp/information/153/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN95981460/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:northgrid:proself:-:*:*:*:enterprise:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "proself",
            "vendor": "northgrid",
            "versions": [
              {
                "lessThanOrEqual": "5.62",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:northgrid:proself:-:*:*:*:gateway:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "proself",
            "vendor": "northgrid",
            "versions": [
              {
                "lessThanOrEqual": "1.65",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:northgrid:proself:-:*:*:*:standard:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "proself",
            "vendor": "northgrid",
            "versions": [
              {
                "lessThanOrEqual": "5.62",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:northgrid:proself:-:*:*:*:mail_sanitize:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "proself",
            "vendor": "northgrid",
            "versions": [
              {
                "lessThanOrEqual": "1.08",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-45727",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-06T04:55:30.434626Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-12-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45727"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-611",
                "description": "CWE-611 Improper Restriction of XML External Entity Reference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-30T01:37:14.051Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "timeline": [
          {
            "lang": "en",
            "time": "2024-12-03T00:00:00+00:00",
            "value": "CVE-2023-45727 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Proself Enterprise/Standard Edition",
          "vendor": "North Grid Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Ver5.62 and earlier"
            }
          ]
        },
        {
          "product": "Proself Gateway Edition",
          "vendor": "North Grid Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Ver1.65 and earlier"
            }
          ]
        },
        {
          "product": "Proself Mail Sanitize Edition",
          "vendor": "North Grid Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Ver1.08 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "XML external entities (XXE)",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-18T09:01:12.285Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.proself.jp/information/153/"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN95981460/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-45727",
    "datePublished": "2023-10-18T09:01:12.285Z",
    "dateReserved": "2023-10-11T07:32:42.029Z",
    "dateUpdated": "2025-07-30T01:37:14.051Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2023-45727",
      "cwes": "[\"CWE-611\"]",
      "dateAdded": "2024-12-03",
      "dueDate": "2024-12-24",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://www.proself.jp/information/153/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-45727",
      "product": "Proself",
      "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "shortDescription": "North Grid Proself Enterprise/Standard, Gateway, and Mail Sanitize contain an improper restriction of XML External Entity (XXE) reference vulnerability, which could allow a remote, unauthenticated attacker to conduct an XXE attack.",
      "vendorProject": "North Grid",
      "vulnerabilityName": "North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-45727\",\"sourceIdentifier\":\"vultures@jpcert.or.jp\",\"published\":\"2023-10-18T10:15:08.643\",\"lastModified\":\"2025-02-06T16:09:26.590\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.\"},{\"lang\":\"es\",\"value\":\"Proself Enterprise/Standard Edition Ver5.62 y anteriores, Proself Gateway Edition Ver1.65 y anteriores, y Proself Mail Sanitize Edition Ver1.08 y anteriores permiten a un atacante remoto no autenticado realizar ataques de entidad externa XML (XXE). Al procesar una solicitud especialmente manipulada que contiene datos XML con formato incorrecto, el atacante puede leer archivos arbitrarios en el servidor que contienen informaci\u00f3n de la cuenta.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"cisaExploitAdd\":\"2024-12-03\",\"cisaActionDue\":\"2024-12-24\",\"cisaRequiredAction\":\"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\",\"cisaVulnerabilityName\":\"North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability\",\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-611\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-611\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:northgrid:proself:*:*:*:*:mail_sanitize:*:*:*\",\"versionEndExcluding\":\"1.09\",\"matchCriteriaId\":\"6D6F51B5-6B83-41C4-A1F6-9D10CB601DB5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:northgrid:proself:*:*:*:*:gateway:*:*:*\",\"versionEndExcluding\":\"1.66\",\"matchCriteriaId\":\"F1BB1954-50C1-40A8-9F47-415ECBB6259F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:northgrid:proself:*:*:*:*:enterprise:*:*:*\",\"versionEndExcluding\":\"5.63\",\"matchCriteriaId\":\"66942ECC-2DB7-4B63-9364-FC7D71722355\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:northgrid:proself:*:*:*:*:standard:*:*:*\",\"versionEndExcluding\":\"5.63\",\"matchCriteriaId\":\"1ED1659B-802E-4F0F-9CF3-BD1BBED1A27F\"}]}]}],\"references\":[{\"url\":\"https://jvn.jp/en/jp/JVN95981460/\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.proself.jp/information/153/\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://jvn.jp/en/jp/JVN95981460/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.proself.jp/information/153/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"cna\": {\"affected\": [{\"vendor\": \"North Grid Corporation\", \"product\": \"Proself Enterprise/Standard Edition\", \"versions\": [{\"version\": \"Ver5.62 and earlier\", \"status\": \"affected\"}]}, {\"vendor\": \"North Grid Corporation\", \"product\": \"Proself Gateway Edition\", \"versions\": [{\"version\": \"Ver1.65 and earlier\", \"status\": \"affected\"}]}, {\"vendor\": \"North Grid Corporation\", \"product\": \"Proself Mail Sanitize Edition\", \"versions\": [{\"version\": \"Ver1.08 and earlier\", \"status\": \"affected\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"XML external entities (XXE)\", \"lang\": \"en\", \"type\": \"text\"}]}], \"references\": [{\"url\": \"https://www.proself.jp/information/153/\"}, {\"url\": \"https://jvn.jp/en/jp/JVN95981460/\"}], \"providerMetadata\": {\"orgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"shortName\": \"jpcert\", \"dateUpdated\": \"2023-10-18T09:01:12.285Z\"}}, \"adp\": [{\"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T20:29:32.421Z\"}, \"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.proself.jp/information/153/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://jvn.jp/en/jp/JVN95981460/\", \"tags\": [\"x_transferred\"]}]}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-45727\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-12-06T04:55:30.434626Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2024-12-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45727\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:northgrid:proself:-:*:*:*:enterprise:*:*:*\"], \"vendor\": \"northgrid\", \"product\": \"proself\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"5.62\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:northgrid:proself:-:*:*:*:gateway:*:*:*\"], \"vendor\": \"northgrid\", \"product\": \"proself\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.65\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:northgrid:proself:-:*:*:*:standard:*:*:*\"], \"vendor\": \"northgrid\", \"product\": \"proself\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"5.62\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:northgrid:proself:-:*:*:*:mail_sanitize:*:*:*\"], \"vendor\": \"northgrid\", \"product\": \"proself\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.08\"}], \"defaultStatus\": \"unknown\"}], \"timeline\": [{\"time\": \"2024-12-03T00:00:00+00:00\", \"lang\": \"en\", \"value\": \"CVE-2023-45727 added to CISA KEV\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-611\", \"description\": \"CWE-611 Improper Restriction of XML External Entity Reference\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-13T15:14:19.772Z\"}}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-45727\", \"assignerOrgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"jpcert\", \"dateReserved\": \"2023-10-11T07:32:42.029Z\", \"datePublished\": \"2023-10-18T09:01:12.285Z\", \"dateUpdated\": \"2025-07-30T01:37:14.051Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.