CVE-2016-5000 in Retail Order Broker

Resumen (Inglés)

The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2016-05-24

Divulgación

2016-08-05

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
95674	Oracle Retail Order Broker Order Broker Foundation XML External Entity	611	No está definido	Arreglo oficial	CVE-2016-5000
90610	Apache POI XLSX2CSV Example XML External Entity	611	No está definido	Arreglo oficial	CVE-2016-5000

Fuentes

• MITRE
• NVD
• CVE Details