CVE-2023-37200

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-611

Affected software

Vendor	Product	Versions
Schneider Electric	EcoStruxure OPC UA Server Expert	Versions prior to SV2.01 SP2

References

Timeline

Published: Jul 12, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-372018.8An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox CVE-2023-372028.8Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment CVE-2023-372037.8Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users int CVE-2023-372046.5A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational funct CVE-2023-372056.5The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firefox < 115.CVE-2023-372066.5Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. T CVE-2023-372076.5A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL.CVE-2023-372087.8When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < CVE-2023-372098.8A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that CVE-2023-37214.8The WP-EMail WordPress plugin before 2.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such a CVE-2023-372106.5A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confusion and possible spo CVE-2023-372118.8Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corrupti