CVE-2021-32972

Name of the Vulnerable Software and Affected Versions Panasonic FPWIN Pro versions 7.5.1.1 and prior

Description The issue allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents, which may allow the attacker to disclose information that is accessible in the context of the user executing software.

Recommendations For versions 7.5.1.1 and prior, consider restricting access to project files and limiting the ability of the XML parser to access external URIs until a patch is available. As a temporary workaround, avoid using the XML parser to embed contents from external URIs in project files.