Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/jp/JVN37857022/ | Third Party Advisory |
| https://www.moj.go.jp/MINJI/minji06_00002.html | Vendor Advisory |
| https://jvn.jp/en/jp/JVN37857022/ | Third Party Advisory |
| https://www.moj.go.jp/MINJI/minji06_00002.html | Vendor Advisory |
Configurations
History
21 Nov 2024, 08:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://jvn.jp/en/jp/JVN37857022/ - Third Party Advisory | |
| References | () https://www.moj.go.jp/MINJI/minji06_00002.html - Vendor Advisory |
01 Aug 2023, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| References | (MISC) https://jvn.jp/en/jp/JVN37857022/ - Third Party Advisory | |
| References | (MISC) https://www.moj.go.jp/MINJI/minji06_00002.html - Vendor Advisory | |
| First Time |
Moj applicant Programme
Moj |
|
| CPE | cpe:2.3:a:moj:applicant_programme:*:*:*:*:*:*:*:* | |
| CWE | CWE-611 |
25 Jul 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-25 04:15
Updated : 2024-11-21 08:03
NVD link : CVE-2023-32639
Mitre link : CVE-2023-32639
CVE.ORG link : CVE-2023-32639
JSON object : View
Products Affected
moj
- applicant_programme
CWE
CWE-611
Improper Restriction of XML External Entity Reference