CVE-2023-28151 - An issue was discovered in Independentsoft JSpreadsheet before 1.1.110

Back Back to CVE browser

CRITICAL

An issue was discovered in Independentsoft JSpreadsheet before 1.1.110

Published Mar 24, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.79%

Description

An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

References (4)

https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-28151
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31862
Advisory
https://excellium-services.com/cert-xlm-advisory/CVE-2023-28151
Third Party Advisory
https://www.independentsoft.de/jword/index.html
Not Applicable

Link	Providers	Tags
https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-28151
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31862		Advisory
https://excellium-services.com/cert-xlm-advisory/CVE-2023-28151		Third Party Advisory
https://www.independentsoft.de/jword/index.html		Not Applicable