CVE-2018-19277

Publication date

2018-11-14 11:00:00

Family

mitre

State

PUBLISHED

Description

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file