CVE-2023-32635 (published 2023-07-19T05:54:29.352Z)
XBRL data create application version 7.0 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker.
Affected products: Vendor: Financial Services Agency
Product: XBRL data create application
Versions: version 7.0 and earlier