CVE-2023-32635

XBRL data create application version 7.0 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker...

CVE-2023-32635

creationtimestamp| type| source ---|---|--- 2023-07-19 12:11:41+00:00| seen| https://t.me/cibsecurity/66999...

CVE-2023-32635

CVE-2023-32635 affects the XBRL data create application (7.0 and earlier). The root cause is improper restriction of XML External Entity (XXE) references, enabling a specially crafted XBRL file to cause the system to read arbitrary files. The issue is documented across multiple sources (e.g., JVN...

CVE-2023-32635

XBRL data create application version 7.0 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker...