GitHub Advisoryadvisory · Packagist
GHSA-xcrg-29h7-h4cj XXE in PHPSpreadsheet due to encoding issue
HIGH
Official page ↗
- Aliases
- CVE-2018-19277
- Ecosystem
- Packagist
- Packages
- phpoffice/phpspreadsheet, phpoffice/phpexcel
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-91
- Reviewed
- 2019-11-19
Affected packages
• Packagist phpoffice/phpspreadsheet: < 1.5.1 → fixed in 1.5.1
• Packagist phpoffice/phpexcel: < 1.8.2 → fixed in 1.8.2
Description
securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file
Related
Alias · CVE (1)
- CVE-2018-19277 securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file vulnerability
Weakness · CWE (1)
- CWE-91 XML Injection weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2018-19277 advisory
- https://github.com/MewesK/TwigSpreadsheetBundle/issues/18 web
- https://github.com/PHPOffice/PhpSpreadsheet/issues/771 web
- https://github.com/PHPOffice/PhpSpreadsheet/pull/780 web
- https://github.com/PHPOffice/PHPExcel/commit/2b601574975acfb9d4378a788ed5f2b747958095 web
- https://github.com/PHPOffice/PhpSpreadsheet/commit/0f8f071e24ee8b114d894ac172f77dc250e5bfa4 web
- https://github.com/FriendsOfPHP/security-advisories/blob/master/phpoffice/phpspreadsheet/CVE-2018-19277.yaml web
- https://github.com/PHPOffice/PHPExcel/commits/1.8.2 web
- https://github.com/PHPOffice/PhpSpreadsheet package
- https://github.com/PHPOffice/PhpSpreadsheet/releases/tag/1.5.1 web
- https://www.bishopfox.com/news/2018/11/phpoffice-versions web
- https://www.drupal.org/sa-contrib-2021-043 web