CVE-2024-23525

Published January 18th, 2024

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

The Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE attacks because it neglects to use the no_xxe option of XML::Twig.

MichaelDaum/spreadsheet-parsexlsx

parse XLSX files

GitHub

1