CVE-2021-32972
- State
- Published
- Severity
- Not scored
- Published
- Jul 9, 2021
- Updated
- Aug 3, 2024
- Reserved
- May 13, 2021
Description
Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents, which may allow the attacker to disclose information that is accessible in the context of the user executing software.
Scores
The record has no CVSS score.
Weaknesses
- CWE-611 IMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-611
Affected Products
| Product | Versions |
|---|---|
Panasonic FPWIN Pron/a |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.