Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2014-3574

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-5wfp-8643-c58x

Improper Input Validation in Apache POI Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

gitlab/maven/org.apache.poi/poi/CVE-2014-3574

Improper Input Validation in Apache POI Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

gitlab/maven/org.apache.poi/poi-ooxml/CVE-2014-3574

Entity expansion (billion laughs) flaw This package allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.