Cve 2025 31672 Improper Input Validation In Apache Poi Leaves Ooxml

Cve 2025 31672 Improper Input Validation In Apache Poi Leaves Ooxml Improper input validation vulnerability in apache poi. the issue affects the parsing of ooxml format files like xlsx, docx and pptx. these file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names (including the path) in the zip. But a recently discovered security flaw, now identified as cve 2025 31672, highlights a critical weakness in how poi's poi ooxml component handles certain bad input. this post explains the vulnerability, demonstrates how an attacker could exploit it, and shows how to mitigate the risk.

Cve 2025 31672 Security Vulnerability Exploit Details Improper input validation vulnerability in apache poi. the issue affects the parsing of ooxml format files like xlsx, docx and pptx. these file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names (including the path) in the zip. Improper input validation vulnerability in apache poi. the issue affects the parsing of ooxml format files like xlsx, docx and pptx. these file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names (including the path) in the zip. Org.apache.poi:poi ooxml is a java api to access microsoft format files. affected versions of this package are vulnerable to improper input validation due to the parsing process of ooxml format files. Apache poi reported an improper input validation vulnerability (cve 2025 31672) discovered on april 9, 2025. the vulnerability affects the parsing of ooxml format files (xlsx, docx, and pptx) in apache poi poi ooxml versions before 5.4.0.

Poi Ooxml Schemas 3 9 Maven Dependency Bpoicloud Org.apache.poi:poi ooxml is a java api to access microsoft format files. affected versions of this package are vulnerable to improper input validation due to the parsing process of ooxml format files. Apache poi reported an improper input validation vulnerability (cve 2025 31672) discovered on april 9, 2025. the vulnerability affects the parsing of ooxml format files (xlsx, docx, and pptx) in apache poi poi ooxml versions before 5.4.0. Improper input validation vulnerability in apache poi. the issue affects the parsing of ooxml format files like xlsx, docx, and pptx. these file formats are zip files, which makes it possible for malicious users to add zip entries with duplicate names (including the path) in the zip. Improper input validation vulnerability in apache poi. the issue affects the parsing of ooxml format files like xlsx, docx and pptx. these file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names (including the path) in the zip. The vulnerability arises due to improper input validation in apache poi when parsing ooxml files (e.g., .xlsx, .docx, .pptx). these files are zip archives, and an attacker can craft a malicious file with duplicate zip entries (same path filename). Improper input validation vulnerability in apache poi. the issue affects the parsing of ooxml format files like xlsx, docx and pptx. these file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names (including the path) in the zip.

Org Apache Poi Poi Ooxml 5 3 0 Maven Repository Improper input validation vulnerability in apache poi. the issue affects the parsing of ooxml format files like xlsx, docx, and pptx. these file formats are zip files, which makes it possible for malicious users to add zip entries with duplicate names (including the path) in the zip. Improper input validation vulnerability in apache poi. the issue affects the parsing of ooxml format files like xlsx, docx and pptx. these file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names (including the path) in the zip. The vulnerability arises due to improper input validation in apache poi when parsing ooxml files (e.g., .xlsx, .docx, .pptx). these files are zip archives, and an attacker can craft a malicious file with duplicate zip entries (same path filename). Improper input validation vulnerability in apache poi. the issue affects the parsing of ooxml format files like xlsx, docx and pptx. these file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names (including the path) in the zip.