Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-19277
8.8
HIGHCVSS v3
Published
November 14, 2018
CVSS v2
6.8 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file
PHPOffice/PhpSpreadsheet
GitHubA pure PHP library for reading and writing spreadsheet files
GitHubA pure PHP library for reading and writing spreadsheet files= *, <= 1.5.0, < 1.5.1NVD
MewesK/TwigSpreadsheetBundleGitHubThis Symfony bundle integrates PhpSpreadsheet into Symfony using Twig.
GitHubThis Symfony bundle integrates PhpSpreadsheet into Symfony using Twig.NVD