Description

An unescaped payload in exceljs

Remediation

References

https://hackerone.com/reports/356809

Related Vulnerabilities

CVE-2017-14949 Vulnerability in maven package org.restlet.osgi:org.restlet

CVE-2023-34247 Vulnerability in npm package @keystone-6/auth

CVE-2021-40111 Vulnerability in maven package org.apache.james:james-server

CVE-2020-8910 Vulnerability in maven package org.webjars.npm:google-closure-library

CVE-2022-3171 Vulnerability in maven package com.google.protobuf:protobuf-kotlin-lite

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Third Party Advisory