CVE-2016-5000

The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity…

published August 5, 2016

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04151 · 90.8th percentile
Published
2016-08-05T14:00Z
EPSS history
Timeline
  • 05 AUG 14:00Z
    The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity…
    cvelistv5