CVE-2024-21765

5.5 mediumEPSS 0.2%

Medium (5.5) in cals-ed. EPSS 0.2% chance of exploitation in the next 30 days.

Electronic Delivery Check System (Doboku) Ver.18.1.0 and earlier, Electronic Delivery Check System (Dentsu) Ver.12.1.0 and earlier, Electronic Delivery Check System (Kikai) Ver.10.1.0 and earlier, and Electronic delivery item Inspection Support SystemVer.4.0.31 and earlier improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2024-01-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cals-ed:electronic_delivery_check_system
cals-ed:electronic_delivery_item_inspection_support_system

References

http://www.cals-ed.go.jp/checksys-release-20231130/
https://jvn.jp/en/jp/JVN77736613/
https://www.ysk.nilim.go.jp/cals/
http://www.cals-ed.go.jp/checksys-release-20231130/
https://jvn.jp/en/jp/JVN77736613/

Check your stack JSON