ACTIVELY EXPLOITED
CVE-2023-45727: North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
| Vendor | North Grid |
|---|---|
| Product | Proself |
| Actively exploited | Yes |
| Added to CISA KEV | 3 Dec 2024 |
| CISA federal deadline | 24 Dec 2024 |
| Weakness (CWE) | CWE-611 |
Required action (CISA's text)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description (NVD)
North Grid Proself Enterprise/Standard, Gateway, and Mail Sanitize contain an improper restriction of XML External Entity (XXE) reference vulnerability, which could allow a remote, unauthenticated attacker to conduct an XXE attack.
SOURCES
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.