CVE-2018-14065

2018-07-1515:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.5%

JSON

XMLReader.php in PHPOffice Common before 0.2.9 allows XXE.

CPENameOperatorVersion
commoneq0.2.8
commoneq0.2.7
commoneq0.1.0
commoneq0.2.5
commoneq0.2.3
commoneq0.2.6
commoneq0.2.2
commoneq0.1.1
commoneq0.2.0
commoneq0.2.1

Name	Operator	Version
common	eq	0.2.8
common	eq	0.2.7
common	eq	0.1.0
common	eq	0.2.5
common	eq	0.2.3
common	eq	0.2.6
common	eq	0.2.2
common	eq	0.1.1
common	eq	0.2.0
common	eq	0.2.1

References

github.com/PHPOffice/Common/pull/23

github.com/PHPOffice/Common/releases/tag/0.2.9

github.com/PHPOffice/PHPWord/issues/1421