CVE-2023-46802

MEDIUM 5.5CVE-2023-46802 · Published 06/11/2023 · updated 17/06/2026

In short

CVE-2023-46802 is a MEDIUM (CVSS 5.5) vulnerability affecting e-tax (nta).
Chance of exploitation in the next 30 days (EPSS): 0.21%, higher than 11.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
e-tax nta	`≤ 3.0.10`	No fix yet

Description

e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configuration of the embedded XML parser. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

References

jvn.jp/en/jp/JVN14762986 · Third Party Advisory
e-tax.nta.go.jp/topics/topics_20231102.htm · Product

More vulnerabilities in e-tax

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free