PHPOffice Common Improper Restriction of XML External Entity Reference

2022-05-1403:00:02

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.5%

JSON

XMLReader.php in PHPOffice Common before 0.2.9 allows XXE.

CPENameOperatorVersion
phpoffice/commoneq0.2.6
phpoffice/commoneq0.2.3
phpoffice/commoneq0.2.5
phpoffice/commoneq0.2.8
phpoffice/commoneq0.1.1
phpoffice/commoneq0.2.0
phpoffice/commoneq0.1
phpoffice/commoneq0.2.2
phpoffice/commoneq0.2.7
phpoffice/commoneq0.2.1

Name	Operator	Version
phpoffice/common	eq	0.2.6
phpoffice/common	eq	0.2.3
phpoffice/common	eq	0.2.5
phpoffice/common	eq	0.2.8
phpoffice/common	eq	0.1.1
phpoffice/common	eq	0.2.0
phpoffice/common	eq	0.1
phpoffice/common	eq	0.2.2
phpoffice/common	eq	0.2.7
phpoffice/common	eq	0.2.1