Skip to content
OpenAdvisories
Unscored CVE-2023-32635 EUVD-2023-36878GHSA-h87w-wj3v-299r

XBRL data create application version 7.0 and earlier improperly restricts XML external entity references (XXE). By processing a specially c…

Published Jul 19, 2023 · Updated Oct 28, 2024 · Assigned by jpcert

Vendor: Financial Services Agency Product: XBRL data create application

Description

XBRL data create application version 7.0 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker.

Affected products

VendorProductAffectedFixed
Financial Services Agency XBRL data create application version 7.0 and earlier —

References