CVE-2024-9044 — XML External Entity (XXE) Vulnerability in EasyTax

CVE-2024-9044

XML External Entity (XXE) Vulnerability in EasyTax PUBLISHED

Description (CNA)

A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS.

Affected (CNA)

Vendor / product	Versions
msg Suisse AG / EasyTax	affected 2023 through 1.2; affected 2022 through 1.3; affected <= 2021 through *

CWE

CWE-611, CWE-827

References

https://www.ag.ch/de/verwaltung/dfr/steuern/natuerliche-personen/steuererklaerung-easytax

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.