Medium severity5.5NVD Advisory· Published Jul 19, 2023· Updated Jun 17, 2026

CVE-2023-32635

Description

XBRL data create application version 7.0 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Financial Services Agency/Xbrl Data Create Applicationv5
Range: version 7.0 and earlier
Edinet Fsa/Xbrl Data Create
cpe:2.3:a:edinet-fsa:xbrl_data_create:*:*:*:*:*:*:*:*
Range: <=7.0
XBRL Data Create Application/XBRL data create applicationllm-create
Range: <=7.0

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN44726469/nvdThird Party Advisory
submit2.edinet-fsa.go.jpnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000