A vulnerability was found in PHPOffice PhpSpreadsheet up to 1.29.1/2.1.0. It has been declared as problematic. This vulnerability affects unknown code of the component XLSX File Handler. The manipulation leads to absolute path traversal.

This vulnerability was named CVE-2024-45290. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.