critical9.8
CVE-2018-14065
PHPOffice Common Improper Restriction of XML External Entity Reference
Impact
`XMLReader.php` in PHPOffice Common before 0.2.9 allows XXE.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | phpoffice/common | < 0.2.9 | 0.2.9 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpoffice Project | Common | before 0.2.9 |