CyberRota Analysis
AI-GeneratedThe vulnerability affects the Excelize library used for handling Microsoft Excel files, specifically prior to version 2.11.0. It allows an attacker to craft an XLSX file that triggers a panic by accessing an invalid index in the shared string slice, potentially leading to application crashes. Organizations utilizing the affected versions of Excelize should prioritize updating to version 2.11.0 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice, allowing an XLSX file containing a shared-string cell with -1 to trigger sharedStrings[-1] and panic when read through GetCellValue or GetRows. This issue is fixed in version 2.11.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)