CVE-2023-45727: North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
Summary: CISA's catalog lists CVE-2023-45727, an improper restriction of XML External Entity reference vulnerability in North Grid Proself Enterprise/Standard, Gateway, and Mail Sanitize. The flaw could let a remote, unauthenticated attacker conduct an XXE attack, and CISA set a remediation due date of 2024-12-24.
What you should know: The attacker needs no credentials and no local access, so any internet-facing Proself instance is exposed until patched; CISA's catalog records known ransomware campaign use as unknown, meaning the exploitation picture is not settled.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-45727North Grid
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026