CVE-2024-21796 | Ministry of Defense Electronic Deliverables Creation Support Tool (Construction Edition) XML File xml external entity reference

A vulnerability classified as problematic has been found in Ministry of Defense Electronic Deliverables Creation Support Tool (Construction Edition) and Electronic Deliverables Creation Support Tool up to 1.0.3. This affects an unknown part of the component XML File Handler. The manipulation leads to xml external entity reference.

This vulnerability is uniquely identified as CVE-2024-21796. The attack needs to be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.