Security Advisory

CVE-2024-56408

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-01-03 16:05:22

Last updated 2025-05-20 18:30:55

Assigner GitHub_M

CVSS score 8.3

State PUBLISHED

Description

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have no sanitization in the `/vendor/phpoffice/phpspreadsheet/samples/Engineering/Convert-Online.php` file, which leads to the possibility of a cross-site scripting attack. Versions 3.7.0, 2.3.5, 2.1.6, and 1.29.7 contain a patch for the issue.

← Browse all CVEs View on cve.org ↗