Xxe

2023-10-0205:15:00

PRIOn knowledge base

www.prio-n.com

xml entity restrictions

arbitrary file access

nvd

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.9%

JSON

FD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

CPENameOperatorVersion
fd_applicationle9.01

CPE	Name	Operator	Version
	fd_application	le	9.01

References

jvn.jp/en/jp/JVN39596244/

web.fd-shinsei.mhlw.go.jp/download/software/index.html