CVE-2024-55878

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-55878
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-55878.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-55878
Aliases
Published
2024-12-12T20:15:21Z
Modified
2025-01-08T14:53:14.345103Z
Summary
[none]
Details

SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in version 1.0.12 and prior to version 1.1.12, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. Version 1.1.12 fixes the issue. As a workaround, don't use direct publication via toHTMLEx.

References

Affected packages

Git / github.com/shuchkin/simplexlsx

Affected ranges

Type
GIT
Repo
https://github.com/shuchkin/simplexlsx
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

0.*

0.8.10
0.8.11
0.8.12
0.8.13
0.8.14
0.8.15
0.8.16
0.8.17
0.8.18
0.8.19
0.8.21
0.8.22
0.8.23
0.8.24
0.8.25
0.8.26
0.8.27
0.8.29
0.8.30
0.8.31
0.8.32
0.8.33
0.8.5
0.8.7
0.8.8
0.8.9
0.9.10
0.9.11

1.*

1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.20
1.0.21
1.1.10
1.1.11