1 results (0.004 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

XMLReader.php in PHPOffice Common before 0.2.9 allows XXE. XMLReader.php en PHPOffice Common en versiones anteriores a la 0.2.9 permite XEE (XML External Entity). • https://github.com/PHPOffice/Common/pull/23 https://github.com/PHPOffice/Common/releases/tag/0.2.9 https://github.com/PHPOffice/PHPWord/issues/1421 • CWE-611: Improper Restriction of XML External Entity Reference •