CVE-2024-56364

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-56364
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56364.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-56364
Aliases
Published
2024-12-23T16:15:07Z
Modified
2025-01-08T16:22:52.879218Z
Summary
[none]
Details

SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in 1.0.12 and ending in 1.1.13, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. This vulnerability is fixed in 1.1.13.

References

Affected packages

Git / github.com/shuchkin/simplexlsx

Affected ranges

Type
GIT
Repo
https://github.com/shuchkin/simplexlsx
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

0.*

0.8.10
0.8.11
0.8.12
0.8.13
0.8.14
0.8.15
0.8.16
0.8.17
0.8.18
0.8.19
0.8.21
0.8.22
0.8.23
0.8.24
0.8.25
0.8.26
0.8.27
0.8.29
0.8.30
0.8.31
0.8.32
0.8.33
0.8.5
0.8.7
0.8.8
0.8.9
0.9.10
0.9.11

1.*

1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.20
1.0.21
1.1.10
1.1.11
1.1.12