CVE-2018-14065

XMLReader.php in PHPOffice Common before 0.2.9 allows XXE.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-07-15

Last modified

2024-08-05

Weaknesses

CWE-611

Affected products

• Common (Phpoffice Project)

References

• https://github.com/PHPOffice/Common/pull/23
• https://github.com/PHPOffice/Common/releases/tag/0.2.9
• https://github.com/PHPOffice/PHPWord/issues/1421