XXE Vulnerability in Applicant Programme Affects Multiple Versions

CVE-2023-32639

What is CVE-2023-32639?

The Applicant Programme, specifically versions 7.06 and earlier, contains a vulnerability that improperly restricts XML external entity references. This weakness allows an attacker to craft a malicious XML file, enabling unauthorized access to arbitrary files on the system. Such exploitation can lead to potential disclosure of sensitive information, heightening security concerns.

References