PHPOffice/PHPExcel

Releases14

Frequency5 months 3 weeks

Last Release over 7 years ago

Stars11.4K

ARCHIVED

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2014-2054 ↗	Jun 4, 2014Wednesday, 4 June 2014, 14:55	—	7.5 HIGH
PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.