Lucene search

K
cvelistJpcertCVELIST:CVE-2023-32635
HistoryJul 19, 2023 - 5:54 a.m.

CVE-2023-32635

2023-07-1905:54:29
jpcert
www.cve.org
3
cve-2023-32635
xml external entity
data application
vulnerability
attacker
system files

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

24.3%

XBRL data create application version 7.0 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker.

CNA Affected

[
  {
    "vendor": "Financial Services Agency",
    "product": "XBRL data create application",
    "versions": [
      {
        "version": "version 7.0 and earlier",
        "status": "affected"
      }
    ]
  }
]

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

24.3%

Related for CVELIST:CVE-2023-32635