CVE-2023-42132

2023-10-0204:12:32

jpcert

www.cve.org

cve-2023-42132

xml

entity restriction

security

fd application

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.9%

JSON

FD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

CNA Affected

[
  {
    "vendor": "Ministry of Health, Labour and Welfare",
    "product": "FD Application",
    "versions": [
      {
        "version": "Apr. 2022 Edition (Version 9.01) and earlier",
        "status": "affected"
      }
    ]
  }
]