JVN#44726469: Improper restriction of XML external entity references (XXE) in XBRL data create application

XBRL data create application provided by Financial Services Agency improperly restricts XML external entity references (XXE) (CWE-611).

Impact

By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.

Products Affected

• XBRL data create application version 7.0 and earlier