CVE-2023-42132 — Ministry of Health, Labour and Welfare / FD Application

Description (CNA)

FD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

Affected (CNA)

Vendor / product	Versions
Ministry of Health, Labour and Welfare / FD Application	affected Apr. 2022 Edition (Version 9.01) and earlier

CWE

No CWE identifiers supplied.

References

https://web.fd-shinsei.mhlw.go.jp/download/software/index.html
https://jvn.jp/en/jp/JVN39596244/

ADP enrichment

CVE

No English description supplied.

https://web.fd-shinsei.mhlw.go.jp/download/software/index.html
https://jvn.jp/en/jp/JVN39596244/

CISA-ADP

No English description supplied.

No references supplied.