CVE-2014-2054
1 advisory.
Packagist/phpoffice/phpexcel CVE-2014-2054: medium
PHPExcel vulnerable to XXE attacks through libxml
Action: Upgrade phpoffice/phpexcel to 1.8.0 or later.
composer require phpoffice/phpexcel:1.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.0 | - |
Fixed versions
| 1.8.0 |
Sources
- osv: GHSA-28rm-rj57-qjpv
- https://nvd.nist.gov/vuln/detail/CVE-2014-2054
- https://github.com/PHPOffice/PHPExcel/commit/e04bf7ed091b0a72d028eacf26d770b485d4e897
- https://github.com/PHPOffice/PHPExcel
- https://github.com/PHPOffice/PHPExcel/blob/2b601574975acfb9d4378a788ed5f2b747958095/changelog.txt#L120
- https://github.com/PHPOffice/PHPExcel/blob/develop/changelog.txt
- http://owncloud.org/about/security/advisories/oC-SA-2014-006
CVE-2014-2054 · published · modified · JSON