A recent vulnerability, CVE-2023-42132, has been identified as a medium-severity issue affecting FD Application Apr. 2022 Edition (Version 9.01) and earlier. This vulnerability could allow an attacker to read arbitrary files on the system by processing a specially crafted XML file. The vulnerability impacts a range of systems running the affected software versions.

How do I know if I'm affected?

If you're using FD Application Apr. 2022 Edition (Version 9.01) or earlier, you may be affected by the vulnerability. This issue is related to improper restriction of XML external entity references (XXE) and could allow an attacker to read arbitrary files on your system by processing a specially crafted XML file. To check if you're affected, verify the version of your FD Application software.

What should I do if I'm affected?

If you're affected by the vulnerability, it's important to update your FD Application software to the latest version, Sep. 2023 Edition (Version 9.02). To do this, visit the FD Application Download Web Site, download the updated version, and follow the installation instructions provided. This will help protect your system from potential attacks.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-42132 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This medium-severity issue affects FD Application Apr. 2022 Edition (Version 9.01) and earlier, and is related to improper restriction of XML external entity references. To address this vulnerability, it's recommended to update the software to the latest version, Sep. 2023 Edition (Version 9.02).

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-611, which involves improper restriction of XML external entity references, allowing attackers to read arbitrary files.

For more details

CVE-2023-42132 is a medium-severity vulnerability affecting FD Application software. By updating to the latest version, users can mitigate the risk of attackers reading arbitrary files through XML external entity references. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• JVN#39596244: Improper restriction of XML external entity references (XXE) in FD Application

• FD Application Download Web Site