CVE-2024-45290

PhpSpreadsheet (PHPSpreadsheet) is affected by CVE-2024-45290 through its XLSX reading flow. When opening an XLSX, the library may pass a URL path to the image-dimension/TYPE check, and with crafted php://filter URLs, an attacker can leak file contents or remote resources. The underlying root cau...