Description

An unescaped payload in exceljs

Remediation

References

https://hackerone.com/reports/356809

Related Vulnerabilities

CVE-2023-49382 Vulnerability in maven package com.jfinal:jfinal

CVE-2018-3745 Vulnerability in npm package atob

CVE-2022-3978 Vulnerability in npm package nodebb

CVE-2022-22968 Vulnerability in maven package org.springframework:spring-context

CVE-2022-31175 Vulnerability in npm package @ckeditor/ckeditor5-markdown-gfm

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Third Party Advisory