Unscored CVE-2023-32639 EUVD-2023-36882GHSA-fr47-w293-v3qj

Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML f…

Published Jul 25, 2023 · Updated Oct 23, 2024 · Assigned by jpcert

Vendor: The Ministry of Justice Product: Applicant Programme

Description

Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

Affected products

Vendor	Product	Affected	Fixed
The Ministry of Justice	Applicant Programme	Ver.7.06 and earlier	—

References

https://www.moj.go.jp/MINJI/minji06_00002.html
https://jvn.jp/en/jp/JVN37857022/