Known Vulnerabilities for products from Phpspreadsheet Project
Listed below are 3 of the newest known vulnerabilities associated with the vendor "Phpspreadsheet Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-7776 json | This affects the package phpoffice/phpspreadsheet from 0.0.0. The library is vulnerable to XSS when creating an html output f... | 6.4 - MEDIUM | 2020-12-09 | 2021-01-19 |
| CVE-2019-12331 json | PHPOffice PhpSpreadsheet before 1.8.0 has an XXE issue. The XmlScanner decodes the sheet1.xml from an .xlsx to utf-8 if somet... | 8.8 - HIGH | 2019-11-07 | 2020-02-10 |
| CVE-2018-19277 json | securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding ... | 8.8 - HIGH | 2018-11-14 | 2022-04-18 |
Known software with vulnerabilities from Phpspreadsheet Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Phpspreadsheet Project | Phpspreadsheet | - |