CVE-2023-28151
An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.
Published: 2023-03-24 · CVSS: 5.3 · CVSS 3.1
An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7