CVE-2023-28152

Name of the Vulnerable Software and Affected Versions Independentsoft JWord versions prior to 1.1.110

Description An issue was discovered in the API, which is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file. This occurs when processing a DOCX file containing a malicious DTD.

Recommendations For versions prior to 1.1.110, update to version 1.1.110 or later to resolve the issue. As a temporary workaround, consider restricting the processing of DOCX files from untrusted sources to minimize the risk of exploitation.