cve/CVE-2017-5992.md at 9cc2023bd8dbe0ab8c5f051fa9a43f1e04594987 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00

0xMarcio d6bcaa53f2 Update CVE sources 2024-07-25 21:25

2024-07-25 21:25:12 +00:00

676 B

Raw Blame History

CVE-2017-5992

Description

Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.

POC

Reference

Github

No PoCs found on GitHub currently.