CVE Vulnerabilities

CVE-2023-35389

Improper Restriction of XML External Entity Reference

Published: Aug 08, 2023 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Weakness

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

Affected Software

Name Vendor Start Version End Version
Dynamics_365 Microsoft 9.0 (including) 9.0.47.08 (excluding)
Dynamics_365 Microsoft 9.1 (including) 9.1.18.22 (excluding)

Potential Mitigations

References