~ / search / GHSA-2853-hf2g-9843

GHSA-2853-hf2g-9843

PHPOffice Common Improper Restriction of XML External Entity Reference

Source: GitHub Advisory Database (reviewed) Critical CVE-2018-14065

Packages

EcosystemPackageAffectedFixed in
Packagist phpoffice/common < 0.2.9 0.2.9

Details

As written in the advisory (Markdown source, shown as plain text).

`XMLReader.php` in PHPOffice Common before 0.2.9 allows XXE.

References

External links from the advisory. They lead to third-party sites.