description: National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.
problem types: Improper restriction of XML external entity reference (XXE)
affected:
{
vendor: Ministry of Land, Infrastructure, Transport and Tourism, Japan
product: National land numerical information data conversion tool
versions:
version: all versions, status: affected
}