Executive brief
XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue
Affected products
- Packagist phpoffice/phpspreadsheet
- Packagist phpoffice/phpexcel
Junglewise Threat Intelligence
CVE-2019-12331: XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue
CVE-2019-12331 · Severity: low · CVSS 3.1 · Published 2019-11-20
Technologies: phpoffice/phpspreadsheet (Packagist), phpoffice/phpexcel (Packagist). Vendors: Packagist.