CVE-2023-32639 (published 2023-07-25T03:32:37.911Z)
Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
Affected products: Vendor: The Ministry of Justice
Product: Applicant Programme
Versions: Ver.7.06 and earlier