CVE-2024-56364
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Dec 23, 2024
CWE ID 79
Summary
CVE-2024-56364 is a vulnerability affecting SimpleXLSX, a software used for parsing and extracting data from Excel XLSx files. In versions 1.0.12 to 1.1.12, there is a vulnerability in the extended toHTMLEx method, which can be exploited to execute arbitrary JavaScript code. This issue poses a significant risk as it allows attackers to inject malicious code into the targeted system. The vulnerability has been addressed in version 1.1.13, which is the recommended update for users to protect their systems from this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.