Description
XMLReader.php in PHPOffice Common before 0.2.9 allows XXE.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | phpoffice/common | < 0.2.9 | 0.2.9 | GHSA-2853-hf2g-9843 |
Critical · 9.8
CVE-2018-14065
EUVD-2022-1937GHSA-2853-hf2g-9843
PHPOffice Common Improper Restriction of XML External Entity Reference
Published Jul 15, 2018 · Updated Aug 5, 2024 · Assigned by mitre