Pimcore includes vulnerable PHPOffice/PhpSpreadsheet

🗓️ 03 Sep 2024 19:26:45Reported by GitHub Advisory DatabaseType

Pimcore PHPOffice/PhpSpreadsheet security vulnerability update availabl

Reporter	Title	Published	Views	Family All 8
OSV	CVE-2024-45048	28 Aug 202421:15	–	osv
OSV	Pimcore includes vulnerable PHPOffice/PhpSpreadsheet	3 Sep 202419:45	–	osv
OSV	XXE in PHPSpreadsheet encoding is returned	29 Aug 202417:58	–	osv
Vulnrichment	CVE-2024-45048 XML External Entity Reference (XXE) in PHPSpreadsheet	28 Aug 202420:38	–	vulnrichment
NVD	CVE-2024-45048	28 Aug 202421:15	–	nvd
Github Security Blog	XXE in PHPSpreadsheet encoding is returned	29 Aug 202417:58	–	github
Cvelist	CVE-2024-45048 XML External Entity Reference (XXE) in PHPSpreadsheet	28 Aug 202420:38	–	cvelist
CVE	CVE-2024-45048	28 Aug 202421:15	–	cve

Vulners

Node

pimcore pimcoreRange11.1.0.0–11.1.6.11

pimcore pimcoreRange10.6.9.0–10.6.9.12

pimcore admin_classic_bundleRange1.5.0–1.5.4pimcore

pimcore admin_classic_bundleRange1.4.0–1.4.7pimcore

pimcore admin_classic_bundleRange<1.3.11pimcore

pimcore data-hubRange1.9.0–1.9.3

pimcore data-hubRange<1.8.9

Source	Link
github	www.github.com/pimcore/pimcore/security/advisories/GHSA-hq76-662x-7mw4
github	www.github.com/advisories/GHSA-ghg6-32f9-2jp7
github	www.github.com/advisories/GHSA-hq76-662x-7mw4

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo