medium5.5
CVE-2023-32635
XBRL data create application version 7.0 and earlier improperly restricts XML external entity references (XXE).
Impact
XBRL data create application version 7.0 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Edinet-Fsa | Xbrl Data Create | through 7.0 |