XXE in PHPSpreadsheet's XLSX reader

🗓️ 18 Nov 2024 20:01:46Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 135 Views

The XmlScanner class in PHPSpreadsheet's XLSX reader allows an XXE attack via bypassing the known CVE-2024-47873 and exploiting regex bypass vulnerability

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-48917	16 Nov 202400:08	–	circl
CNNVD	PhpSpreadsheet 代码问题漏洞	18 Nov 202400:00	–	cnnvd
CVE	CVE-2024-48917	18 Nov 202419:48	–	cve
Cvelist	CVE-2024-48917 XXE in PHPSpreadsheet's XLSX reader	18 Nov 202419:48	–	cvelist
EUVD	EUVD-2024-3208	3 Oct 202520:07	–	euvd
NVD	CVE-2024-48917	18 Nov 202420:15	–	nvd
OSV	CVE-2024-48917 XXE in PHPSpreadsheet's XLSX reader	18 Nov 202419:48	–	osv
OSV	GHSA-7CC9-J4MV-VCJP XXE in PHPSpreadsheet's XLSX reader	18 Nov 202420:01	–	osv
RedhatCVE	CVE-2024-48917	4 Feb 202523:35	–	redhatcve
Snyk	XML External Entity (XXE) Injection	18 Nov 202420:42	–	snyk

Vulners

Node

phpoffice phpexcelRange≤1.8.2composer

phpoffice phpspreadsheetRange3.3.0–3.4.0composer

phpoffice phpspreadsheetRange2.2.0–2.3.2composer

phpoffice phpspreadsheetRange2.0.0–2.1.3composer

phpoffice phpspreadsheetRange<1.29.4composer

Source	Link
github	www.github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-7cc9-j4mv-vcjp
owasp	www.owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE)_Processing
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-48917
github	www.github.com/PHPOffice/PhpSpreadsheet/blob/39fc51309181e82593b06e2fa8e45ef8333a0335/src/PhpSpreadsheet/Reader/Security/XmlScanner.php
github	www.github.com/advisories/GHSA-7cc9-j4mv-vcjp

06 Mar 2025 18:22Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00173

SSVC

CWE-611