PT-2023-21597
CVE-2023-28151
·
تاريخ النشر
2023-03-24
·
تاريخ التحديث
2023-03-30
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Independentsoft JSpreadsheet versions prior to 1.1.110
Description
An issue was discovered in the API, which is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.
Recommendations
For versions prior to 1.1.110, update to version 1.1.110 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾