CVE-2024-21765

Summary

CVE-2024-21765 is a vulnerability affecting versions 18.1.0 and earlier of Doboku, 12.1.0 and earlier of Dentsu, 10.1.0 and earlier of Kikai, and 4.0.31 and earlier of the Electronic delivery item Inspection Support System. The vulnerability involves improper XML external entity reference (XXE) restrictions. An attacker can exploit this flaw by providing a specially crafted XML file for processing. Successful exploitation allows the attacker to read arbitrary files on the system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.