CVE-2023-45727 on CISA KEV

Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted requ

01What CISA says about this vulnerability

Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the…

02Required action — verbatim from CISA

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

03Notes & references

• www.proself.jp — https://www.proself.jp/information/153/
• jvn.jp — https://jvn.jp/en/jp/JVN95981460/

04SARA's analyst layer — why this matters

This vulnerability is currently on the CISA KEV list, which CISA only adds CVEs to when there is reliable evidence of active exploitation in the wild. For federal civilian agencies, BOD 22-01 requires remediation by the due date above. For everyone else, KEV is the strongest "patch immediately" signal you can get from public threat intel.

05Affected products (summary)

Vendor	Product	Versions
North Grid Corporation	Proself Enterprise/Standard Edition	Ver5.62 and earlier
North Grid Corporation	Proself Gateway Edition	Ver1.65 and earlier
North Grid Corporation	Proself Mail Sanitize Edition	Ver1.08 and earlier

06Detection

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection:

Open in Sigma generator →