Debian/libapache-poi-java: medium 5.5
Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.
Action: Upgrade libapache-poi-java to 3.17-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.17-1 | - |
Fixed versions
| 3.17-1 |
Sources
published · modified · JSON