xlsx-streamer XXE漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://security.snyk.io/vuln/SNYK-JAVA-COMMONITORJBL-2414470
• https://www.4armed.com/blog/excel-streaming-reader-vulnerability/
• https://www.cnblogs.com/zpchcbd/p/14774132.html
• https://avd.aliyun.com/detail?id=AVD-2022-23640
• https://www.miggo.io/vulnerability-database/cve/CVE-2022-23640
• https://cve.imfht.com/detail/CVE-2022-23640?lang=en
• https://security.snyk.io/package/maven/com.monitorjbl%3Axlsx-streamer
• https://www.cnblogs.com/iyiyang/articles/10055824.html
• https://www.cnblogs.com/AtesetEnginner/p/12017959.html
• https://github.com/JoyChou93/java-sec-code/blob/master/src/main/java/org/joychou/controller/othervulns/xlsxStreamerXXE.java

Related Vulnerabilities

• PoClightstreamer-dashboard-exposure: Lightstreamer Dashboard Exposure
• PoCCVE-2019-11013: Nimble Streamer <=3.5.4-9 - Local File Inclusion
• PoCopen-mjpg-streamer: open-mjpg-streamer
• MJPG-streamer网络摄像头-未授权访问