CVE-2019-17323 - ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document

Back Back to CVE browser

HIGH

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document

Published Oct 30, 2019

8.8

HIGH

CVSS 3.1

EPSS 1.59%

Description

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

Affected products

Vendor ClipSoft Product Rexpert Default
n/a
- Version
  1.0.0.527 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ClipSoft

Rexpert

n/a

Version	Status	Constraints
1.0.0.527 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-91

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7736
Advisory
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7736		Advisory
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184		x_refsource_MISCThird Party Advisory