logo

Database

XML injection (XXE) In phpoffice/phpexcel

Description

PHPExcel XXE Vulnerability PHPExcel XXE Vulnerability

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2015-35422. NVD-2015-35423. OSV-2015-35424. GCVE-2015-3542

References

1. https://github.com/PHPOffice/PHPExcel/commit/0ab614fd952f82f9b7a9280731daa2300e6b000c2. https://github.com/FriendsOfPHP/security-advisories/blob/master/phpoffice/phpexcel/CVE-2015-3542.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.