Lucene search

K
vulnrichmentJpcertVULNRICHMENT:CVE-2023-42132
HistoryOct 02, 2023 - 4:12 a.m.

CVE-2023-42132

2023-10-0204:12:32
jpcert
github.com
cve-2023-42132
xml external entity
fd application
apr. 2022 edition
version 9.01
system vulnerability

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

FD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-42132