Lucene search
K

59 matches found

OSV
OSV
added 2023/04/24 9:30 a.m.56 views

GHSA-4R6H-8V6P-XVW6 Prototype Pollution in sheetJS

All versions of SheetJS CE through 0.19.2 are vulnerable to "Prototype Pollution" when reading specially crafted files. Workflows that do not read arbitrary files for example, exporting data to spreadsheet files are unaffected. A non-vulnerable version cannot be found via npm, as the repository...

7.8CVSS7.8AI score0.00988EPSS
Exploits1References7
NVD
NVD
added 2023/04/24 8:15 a.m.13 views

CVE-2023-30533

SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...

7.8CVSS7.5AI score0.00988EPSS
Exploits1References3
OSV
OSV
added 2023/04/24 8:15 a.m.1 views

CVE-2023-30533

SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...

7.8CVSS7.1AI score0.00988EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/04/24 12:0 a.m.9 views

CVE-2023-30533

SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...

6.7AI score0.00988EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/04/24 12:0 a.m.4 views

SheetJS 安全漏洞

SheetJS is a software application. A parser and writer for various spreadsheet formats. A security vulnerability exists in SheetJS Community Edition prior to version 0.19.3, which stems from a vulnerability that allows an attacker to prototype contamination by crafting files...

7.8CVSS7.6AI score0.00988EPSS
Exploits1References5
CVE
CVE
added 2023/04/24 12:0 a.m.217 views

CVE-2023-30533

SheetJS Community Edition versions up to 0.19.2 are affected by a Prototype Pollution vulnerability triggered by crafted files; 0.19.3 and later are fixed. A POC exploit exists on GitHub for CVE-2023-30533. Affected component: SheetJS CE parser/reader behavior enabling pollution via crafted input...

7.8CVSS7.5AI score0.00988EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/12 12:0 a.m.3 views

PT-2023-4424 · Unknown · Sheetjs Community Edition

Name of the Vulnerable Software and Affected Versions: SheetJS Community Edition versions prior to 0.19.3 Description: The issue is related to a Prototype Pollution vulnerability, which can be exploited by a remote attacker using a specially crafted file, potentially allowing for unauthorized...

10CVSS7.4AI score0.00988EPSS
Exploits1References14
BDU FSTEC
BDU FSTEC
added 2022/05/11 12:0 a.m.3 views

The vulnerability of the SheetJS and SheetJS Pro software, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the SheetJS and SheetJS Pro software lies in their uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially crafted xlsx file that is incorrectly processed...

5.5CVSS6.3AI score0.0088EPSS
Exploits0References4Affected Software3
Node.js
Node.js
added 2021/07/22 7:54 p.m.80 views

Denial of Service

Overview SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js. Recommendation Upgrade to version 0.17.0 or later References - GitHub Advisory - CVE...

4.3CVSS4.9AI score0.0088EPSS
Exploits0Affected Software1
Github Security Blog
Github Security Blog
added 2021/07/22 7:48 p.m.124 views

Denial of Service in SheetJS Pro

SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...

5.5CVSS5.5AI score0.0088EPSS
Exploits0References6Affected Software2
OSV
OSV
added 2021/07/22 7:48 p.m.21 views

GHSA-3X9F-74H4-2FQR Denial of Service in SheetJS Pro

SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...

5.5CVSS5.4AI score0.0088EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2021/07/22 7:48 p.m.67 views

Denial of Service in SheetsJS Pro

SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

5.5CVSS5.4AI score0.0088EPSS
Exploits0References6Affected Software2
OSV
OSV
added 2021/07/22 7:48 p.m.26 views

GHSA-8VCR-VXM8-293M Denial of Service in SheetsJS Pro

SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

5.5CVSS5.4AI score0.0088EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2021/07/22 7:47 p.m.62 views

Denial of Service in SheetJS Pro

SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...

5.5CVSS4.8AI score0.0088EPSS
Exploits0References6Affected Software2
OSV
OSV
added 2021/07/22 7:47 p.m.146 views

GHSA-G973-978J-2C3P Denial of Service in SheetJS Pro

SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...

5.5CVSS5.4AI score0.0088EPSS
Exploits0References5
Veracode
Veracode
added 2021/07/21 6:33 a.m.17 views

Denial Of Service

xlsx of sheetjs is vulnerable to denial of service. The vulnerability exists due to an XLS Xnum Buffer underflow. An attacker is able to crash the system by uploading a malicious crafted xlsx document...

5.5CVSS3.5AI score0.0088EPSS
Exploits0References4Affected Software3
CNVD
CNVD
added 2021/07/21 12:0 a.m.23 views

SheetJS Pro has an unspecified vulnerability

SheetJS Pro is open source a spreadsheet data parser and writer. Create beautiful reports. Faster import and export. Preview grids, images, and PDFs. A security vulnerability exists in SheetJS Pro version 0.16.9 and earlier, which can be exploited by attackers to cause a denial of service memory...

5.5CVSS4.7AI score0.0088EPSS
Exploits0References1
OSV
OSV
added 2021/07/19 2:15 p.m.2 views

CVE-2021-32013

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

5.5CVSS7.3AI score0.0088EPSS
Exploits0References4
OSV
OSV
added 2021/07/19 2:15 p.m.2 views

CVE-2021-32014

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...

5.5CVSS7.3AI score0.0088EPSS
Exploits0References4
OSV
OSV
added 2021/07/19 2:15 p.m.1 views

CVE-2021-32012

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...

5.5CVSS7.3AI score0.0088EPSS
Exploits0References4
Rows per page
Query Builder