Apache POI's XLSX2CSV Example XML External Entity Vulnerability
Apache POI is a free and open source cross-platform Java API written in Java . An XML external entity vulnerability exists in Apache POI's XLSX2CSV Example, which can be exploited by an attacker to bypass security mechanisms and read arbitrary files via an OpenXML file that contains external body...