CVE-2024-56364

shuchkin/simplexlsx

on github

Published

Dec 23, 2024

Severity

CVSS v3:

N/A

CVSS v2:

N/A

Description

SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in 1.0.12 and ending in 1.1.13, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. This vulnerability is fixed in 1.1.13.

References

https://github.com/shuchkin/simplexlsx/commit/71a5e3d40d14e33161f8a40b3fd02de542218ef0
https://github.com/shuchkin/simplexlsx/security/advisories/GHSA-r87q-fj25-f8jf

Configurations

CPE23	Version Start	Version End	Exact Version

External Links

NVD - CVE-2024-56364