Security Advisory

CVE-2018-19277

8.8
HIGH

Vulnerability Description

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file
Published Date November 14, 2018
Official Source NIST NVD Advisory