CVE:CVE-2021-32012
CNNVD:CNNVD-202107-1314
SheetJS Pro是开源的一个电子表格数据解析器和编写器。创建漂亮的报告。更快的导入和导出。预览网格、图像和 PDF。
SheetJS Pro 0.16.9版本及之前版本存在安全漏洞，攻击者可利用该漏洞通过一个精心制作的.xlsx文档导致拒绝服务(内存消耗)。
solution:Upgrade sheetjs_project sheetjs to a higher version than 0.16.9,and avoid the version (,0.16.9]; Upgrade sheetjs_project sheetjs_pro to a higher version than 0.16.9,and avoid the version (,0.16.9]; Upgrade oracle rest_data_services to a higher version than 21.2.4,and avoid the version (,21.2.4)