cveboard RSS feed

CVE-2024-21796

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Electronic Deliverables Creation Support Tool (Construction Edition) prior to Ver1.0.4 and Electronic Deliverables Creation Support Tool (Design & Survey Edition) prior to Ver1.0.4 improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Electronic Deliverables Creation Support Tool (Construction Edition)

Vendor
Ministry of Defense
Product
Electronic Deliverables Creation Support Tool (Construction Edition)
Platforms
Unknown
Default status
Unknown
Electronic Deliverables Creation Support Tool (Construction Edition) · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
prior to Ver1.0.4affectedUnavailableUnavailableUnavailableNone listed

Electronic Deliverables Creation Support Tool (Design & Survey Edition)

Vendor
Ministry of Defense
Product
Electronic Deliverables Creation Support Tool (Design & Survey Edition)
Platforms
Unknown
Default status
Unknown
Electronic Deliverables Creation Support Tool (Design & Survey Edition) · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
prior to Ver1.0.4affectedUnavailableUnavailableUnavailableNone listed