Executive brief
XXE in PHPSpreadsheet due to encoding issue
Affected products
- Packagist phpoffice/phpspreadsheet
- Packagist phpoffice/phpexcel
Junglewise Threat Intelligence
CVE-2018-19277: XXE in PHPSpreadsheet due to encoding issue
CVE-2018-19277 · Severity: low · CVSS 3.1 · Published 2019-11-20
Technologies: phpoffice/phpspreadsheet (Packagist), phpoffice/phpexcel (Packagist). Vendors: Packagist.