CVE-2018-19277

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file

published November 14, 2018

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07791 · 94.6th percentile
Published
2018-11-14T11:00Z
EPSS history
Timeline
  • 14 NOV 11:00Z
    securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file
    cvelistv5