Medium severity5.5NVD Advisory· Published Oct 2, 2023· Updated Jun 17, 2026

CVE-2023-42132

Description

FD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ministry of Health, Labour and Welfare/FD Applicationv5
Range: Apr. 2022 Edition (Version 9.01) and earlier
CGI::Application/CGI::Applicationllm-fuzzy
Range: <= 9.01
Mhlw/Fd Application
cpe:2.3:a:mhlw:fd_application:*:*:*:*:*:*:*:*
Range: <=9.01

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN39596244/nvdThird Party Advisory
web.fd-shinsei.mhlw.go.jp/download/software/index.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000