CVE-2024-22380

5.5 mediumEPSS 0.2%

Medium (5.5) in maff electronic delivery check system. EPSS 0.2% chance of exploitation in the next 30 days.

Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version) March, Heisei 31 era edition Ver.14.0.001.002 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2024-01-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

maff:electronic_delivery_check_system

References

https://jvn.jp/en/jp/JVN01434915/
https://www.maff.go.jp/j/nousin/seko/nouhin_youryou/densi.html
https://jvn.jp/en/jp/JVN01434915/
https://www.maff.go.jp/j/nousin/seko/nouhin_youryou/densi.html

Check your stack JSON