Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2017-5992

Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.

VectorLOCAL

PublishedFeb 15, 2017, 19:59

Published Bycve@mitre.org

Base Score

Score8.2

Package (Ecosystem)IntroducedFixedLimit

openpyxl(PyPI)02.4.2N/A

CWE-611

Base Score

8.2

Vector String

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:H

Base SeverityHigh

Version

3.0

Attack Vector (AV)

LOCAL