Lucene search
+L

7 matches found

OSV
OSV
added 2025/08/25 2:8 p.m.6 views

CVE-2025-54370 PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser

PhpOffice/PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to versions 1.30.0, 2.1.12, 2.4.0, 3.10.0, and 5.0.0, SSRF can occur when a processed HTML document is read and displayed in the browser. The vulnerability lies in the setPath method of the...

8.7CVSS6.6AI score
SaveExploits0References8
Rows per page
Query Builder