AI Score
Confidence
High
EPSS
Percentile
88.8%
securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file
github.com/MewesK/TwigSpreadsheetBundle/issues/18
github.com/PHPOffice/PhpSpreadsheet/issues/771
www.bishopfox.com/news/2018/11/phpoffice-versions/
www.drupal.org/sa-contrib-2021-043