exceljs through 4.4.0 Path Traversal via Unvalidated addImage filename
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 0.4%
exploitation probability
0.4%top 69% of all CVEs
observed exploitation
nono source reports it
exceljs through 4.4.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths. Attackers can supply arbitrary file paths to read any file accessible to the Node.js process and embed it in the generated workbook.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
exceljs · exceljsReferences
https://github.com/exceljs/exceljshttps://github.com/exceljs/exceljs/blob/v4.4.0/lib/doc/workbook.js#L142-L147https://github.com/exceljs/exceljs/blob/v4.4.0/lib/xlsx/xlsx.js#L421-L429https://github.com/mateocallec/exceljs-hardened/security/advisories/GHSA-m8mg-8574-gm3mhttps://www.vulncheck.com/advisories/exceljs-through-path-traversal-via-unvalidated-addimage-filename