Unrestricted File Upload Vulnerability Could Lead to Code Injection

CVE-2024-38734

9.1CRITICAL

Key Information

Vendor: Spreadsheetconverter
Status: Import Spreadsheets From Microsoft Excel
Vendor: CVE Published:; 12 July 2024

Summary

Unrestricted Upload of File with Dangerous Type vulnerability in SpreadsheetConverter Import Spreadsheets from Microsoft Excel allows Code Injection.This issue affects Import Spreadsheets from Microsoft Excel: from n/a through 10.1.4.

Affected Version(s)

Import Spreadsheets from Microsoft Excel <= 10.1.4

CVSS V3.1

Score:

9.1

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Changed

Timeline

Vulnerability published.
Jul 12, 2024
Vulnerability Reserved.
Jun 19, 2024

Collectors

NVD DatabaseMitre Database

Credit

Peng Zhou (Patchstack Alliance)