CVE-2023-43067

Dell / Unity PUBLISHED

Description (CNA)

Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system.

Affected (CNA)

Vendor / product	Versions
Dell / Unity	affected Versions prior to 5.3.0.0.5.120

CWE

CWE-611

References

https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities

CISA-ADP

No English description supplied.

No references supplied.