CVE-2016-5851

python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document

published December 21, 2016

CVSS
—
EPSS
2%
Percentile
83.6
In the wild
Unconfirmed
What it is

python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02354 · 83.6th percentile
Published
2016-12-21T00:00Z
EPSS history
Timeline
  • 21 DEC 00:00Z
    python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document
    cvelistv5