Description (CNA)
securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/PHPOffice/PhpSpreadsheet/issues/771
- https://www.bishopfox.com/news/2018/11/phpoffice-versions/
- https://github.com/MewesK/TwigSpreadsheetBundle/issues/18
- https://www.drupal.org/sa-contrib-2021-043
ADP enrichment
No English description supplied.