PT-2024-28178 · Microsoft · Import Spreadsheets From Microsoft Excel

·

CVE-2024-38734

·

Published

2024-07-12

·

Updated

2024-07-12

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Import Spreadsheets from Microsoft Excel versions 10.1.4 and earlier
Description The issue allows for the unrestricted upload of files with dangerous types, potentially enabling code injection. This is related to the Import Spreadsheets from Microsoft Excel functionality.
Recommendations For versions 10.1.4 and earlier, update to a version later than 10.1.4 to resolve the issue.

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-38734

Affected Products

Import Spreadsheets From Microsoft Excel