Skip to content
OpenAdvisories
Unscored CVE-2023-42132 EUVD-2023-46591GHSA-63vx-fx7j-2x6p

FD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external entity references (XXE). By processing a spec…

Published Oct 2, 2023 · Updated Sep 20, 2024 · Assigned by jpcert

Vendor: Ministry of Health, Labour and Welfare Product: FD Application

Description

FD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

Affected products

VendorProductAffectedFixed
Ministry of Health, Labour and Welfare FD Application Apr. 2022 Edition (Version 9.01) and earlier —

References