CVE-2023-30533
Prototype pollution in sheetjs xlsx library allowing arbitrary property injec...
CVSS 7.5 (High)
EPSS 0.0125 (0th pct)
Technical Description
Prototype pollution in sheetjs xlsx library allowing arbitrary property injection.
Why this matters to your organisation:
The organisation uses xlsx, which is affected by CVE-2023-30533. The Exploit Prediction Scoring System (EPSS) estimates a 1.2% probability of exploitation within 30 days. This is a high-importance service for the organisation.
The organisation uses xlsx, which is affected by CVE-2023-30533. The Exploit Prediction Scoring System (EPSS) estimates a 1.2% probability of exploitation within 30 days. This is a high-importance service for the organisation.
Potential Impact
A vulnerability in xlsx rated High (CVSS 7.5).
✅ Recommended Next Action
Review the vendor advisory for CVE-2023-30533 and assess whether patching or compensating controls are appropriate for your environment. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-30533
Confidence: High
The installed version exactly matches an affected version.
CVE Details
| Product | sheetjs xlsx |
| Version Range | < 0.19.3 → ∞ |
| Installed | 0.19.2 |
| Match Type | Exact Match |
| CVSS | 7.5 |
| KEV | No |
| EPSS | 0.0125 |
| Source |
NVD · May 10, 2023 View reference ↗ |
Score Breakdown
⭐ Importance+10
📈 EPSS+0.2
🔢 CVSS+7.5
Total18