Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3515
HistoryFeb 08, 2017 - 8:18 a.m.

XML External Entity (XXE)

2017-02-0808:18:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.005

Percentile

76.0%

openpyxl is vulnerable to XML external entity. The vulnerability is possible because it adopts lxml which by default does resolve external entities.