CVEvulnerability

CVE-2024-47873

7.5 HIGH Published 2024-11-18 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-11-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-611

Description

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. The XmlScanner class has a scan method which should prevent XXE attacks. However, prior to versions 1.9.4, 2.1.3, 2.3.2, and 3.4.0, the regexes used in the `scan` method and the findCharSet method can be bypassed by using UCS-4 and encoding guessing. An attacker can bypass the sanitizer and achieve an XML external entity attack. Versions 1.9.4, 2.1.3, 2.3.2, and 3.4.0 fix the issue.

Affected configurations

• phpoffice phpspreadsheet (< 1.29.4) • phpoffice phpspreadsheet (>= 2.0.0 < 2.1.3) • phpoffice phpspreadsheet (>= 2.2.0 < 2.3.2) • phpoffice phpspreadsheet (>= 3.3.0 < 3.4.0)

Related

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References