PT-2019-4677 · Apache+1 · Apache Poi+1

Published 2019-10-20 · Updated 2022-05-24 · CVE-2019-12415

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache POI versions up to 4.1.0

Description The issue is related to the XSSFExportToXml tool in Apache POI, which can be exploited to read files from the local filesystem or internal network resources via XML External Entity (XXE) Processing when converting user-provided Microsoft Excel documents. This is due to insufficient restrictions on XML external entities.

Recommendations For Apache POI versions up to 4.1.0, consider disabling the XSSFExportToXml tool until a patch is available to prevent potential exploitation. Restrict access to sensitive files and network resources to minimize the risk of unauthorized access.

Exploit

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

BDU:2020-00970

CVE-2019-12415

GHSA-9JWC-Q6J3-8G9G

Affected Products

Apache Poi

Debian

References · 33

• 🔥 https://blog.gypsyengineer.com/en/security/cve-2019-12415-xml-processing-vulnerability-in-apache-poi.html · Exploit
• https://osv.dev/vulnerability/CVE-2019-12415 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00970 · Security Note
• https://osv.dev/vulnerability/GHSA-9jwc-q6j3-8g9g · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12415 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12415 · Security Note
• https://ubuntu.com/security/CVE-2019-12415 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-12415 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-12415 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/libapache-poi-java · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-12415 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-12415 · Vendor Advisory
• https://github.com/apache/poi · Note
• https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E · Note
• https://oracle.com/security-alerts/cpujul2020.html · Note