CVE-2024-9044

A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS.

Score

CVSS 4.0 4.6 Medium

Status

Deferred - vulnerability@ncsc.ch

Published

2024-11-29

Last modified

2024-11-29

Weaknesses

CWE-611, CWE-827

Affected products

• Easytax (Msg Suisse Ag)

References

• https://www.ag.ch/de/verwaltung/dfr/steuern/natuerliche-personen/steuererklaerung-easytax