Skip to content

There were no proper POCs for CVE-2023-30533 so I made one. (Reported by Vsevolod Kokorin)

Notifications You must be signed in to change notification settings

BenEdridge/CVE-2023-30533

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

POC - CVE-2023-30533

A POC for CVE-2023-30533

Copied as per: https://cdn.sheetjs.com/advisories/CVE-2023-30533:

 All releases of SheetJS Community Edition up to version 0.19.2 are affected. This includes:

 - scripts and modules on the SheetJS CDN through version 0.19.2 [2]
 - modules published with the name `xlsx` on npmjs.com [3]
 - scripts on third-party CDNs that pull from the `xlsx` package on npmjs.com [4] [5]
 - modules published with the name `sheetjs` on deno.land [6]

https://git.sheetjs.com/sheetjs/sheetjs/issues/2929

Acknowledgements

Vsevolod Kokorin of SolidLab https://xakep.ru/2023/06/22/sheetjs-bugs/

About

There were no proper POCs for CVE-2023-30533 so I made one. (Reported by Vsevolod Kokorin)

Resources

Stars

Watchers

Forks