CVE-2023-42132
Assigner: jpcert
Published: 2023-10-02T04:12:32.133Z
State: PUBLISHED
affected: vendor: Ministry of Health, Labour and Welfare
product: FD Application
versions: version: Apr. 2022 Edition (Version 9.01) and earlier
status: affected
descriptions: value: FD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
problemTypes: descriptions: description: XML external entities (XXE)
type: text