Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.2
CVSSv3

CVE-2017-5992

Published: 15/02/2017 Updated: 17/02/2017
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.2 | Impact Score: 5.8 | Exploitability Score: 1.8
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:P
Subscribe to Python

Vulnerability Summary

Openpyxl 2.4.1 resolves external entities by default, which allows remote malicious users to conduct XXE attacks via a crafted .xlsx document.

Vulnerable Product Search on Vulmon Subscribe to Product

python openpyxl 2.4.1

Vendor Advisories

Arch Linux Issues:
Openpyxl 241 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted xlsx document ...

References

CWE-611https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854442https://bitbucket.org/openpyxl/openpyxl/issues/749https://bitbucket.org/openpyxl/openpyxl/commits/3b4905f428e1http://www.openwall.com/lists/oss-security/2017/02/07/5https://nvd.nist.govhttps://security.archlinux.org/CVE-2017-5992
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site request forgeryCVE-2024-34351CVE-2024-1076CVE-2024-25522CVE-2024-34547CVE-2024-4644unauthorizedremoteCVE-2024-4671
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook