CVE-2024-48917

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. The "XmlScanner" class has a scan method which should prevent XXE attacks. However, in a bypass of the previously reported "CVE-2024-47873", the regexes from the "findCharSet" method, which is used for determining the...

CVE-2024-48917: Improper Restriction of XML External Entity Reference

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. The XmlScanner class has a scan method which should prevent XXE attacks. However, in a bypass of the previously reported CVE-2024-47873, the regexes from the findCharSet method, which is used for determining the current...

PT-2024-33266

Name of the Vulnerable Software and Affected Versions PhpSpreadsheet versions prior to 1.9.4 PhpSpreadsheet versions prior to 2.1.3 PhpSpreadsheet versions prior to 2.3.2 PhpSpreadsheet versions prior to 3.4.0 Description The XmlScanner class in PhpSpreadsheet has a scan method that is supposed t...