CVE-2023-42132

Summary

CVE-2023-42132 is a vulnerability affecting the FD Application Apr. 2022 Edition (Version 9.01) and earlier. This issue arises due to improper XML external entity (XXE) restriction. An attacker can exploit this vulnerability by providing a specially crafted XML file for processing. Consequentially, the system may reveal arbitrary files to the attacker, posing a potential security risk. It is essential for users to apply the necessary patches or upgrades to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.