CVE-2023-30533

SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected.

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.99% chance of exploitation in the next 30 days, 62nd percentile

Published

2023-04-24

Updated

2025-02-04

Proof-of-concept exploits (1)

• BenEdridge/CVE-2023-3053312★ · 2023-08-09

Security advisories

• https://cdn.sheetjs.com/advisories/CVE-2023-30533
• advisories/GHSA-4r6h-8v6p-xvw6
• https://git.sheetjs.com/sheetjs/sheetjs/src/branch/master/CHANGELOG.md

References

• CVE Record
• NVD entry

Related

• CVE-2021-46703