The vulnerability CVE-2025-23562 affects pitinca XLSXviewer (<= 2.1.1) and involves improper limitation of a pathname to a restricted directory, commonly known as a path traversal issue. This weakness could allow an attacker to access files or directories outside the intended restricted scope, potentially leading to denial of service or other availability impacts. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, and the impact is limited to availability loss. No vendor advisory or patch information is currently available.

The vulnerability could allow remote attackers to cause availability disruption by accessing files outside the intended directory scope. There is no indication of confidentiality or integrity impact. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when processing untrusted XLSX files with XLSXviewer and consider restricting its usage or running it in a controlled environment.