sonatype-2023-4187 Security Details

CVE ID

sonatype-2023-4187

CWE

N/A

CVE Description

Apache poi - Uncaught Exception

Published

Sep 25, 2023

CVSS Score & Severity

7.5High

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

0%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

org/apache/poi/ddf/EscherContainerRecord.fillFields([BILorg/apache/poi/ddf/EscherRecordFactory;)I

JVM

org/apache/poi/ooxml/POIXMLRelation.getContents(Lorg/apache/poi/openxml4j/opc/PackagePart;)Ljava/io/InputStream;

JVMVulnerable params: 0

Affected Ecosystems

affected

Source

Sonatype

References

bugs.chromium.orgTHIRD_PARTY

bugs.chromium.orgTHIRD_PARTY