CVE-2019-12415

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an…

published October 23, 2019

CVSS
—
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00998 · 62.4th percentile
Published
2019-10-23T19:27Z
EPSS history
Timeline
  • 23 OCT 19:27Z
    In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an…
    cvelistv5