Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    GHSA-3M9X-2QFJ-XVQ4

    Vulnerability from github – Published: 2024-11-07 17:28 – Updated: 2024-11-07 17:28
    VLAI
    Summary
    PHPExcel XXE Vulnerability
    Details

    PHPExcel XXE Vulnerability

    Show details on source website

    {
      "affected": [
        {
          "package": {
            "ecosystem": "Packagist",
            "name": "phpoffice/phpexcel"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "1.8.1"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ]
        }
      ],
      "aliases": [
        "CVE-2015-3542"
      ],
      "database_specific": {
        "cwe_ids": [
          "CWE-611"
        ],
        "github_reviewed": true,
        "github_reviewed_at": "2024-11-07T17:28:59Z",
        "nvd_published_at": null,
        "severity": "HIGH"
      },
      "details": "PHPExcel XXE Vulnerability",
      "id": "GHSA-3m9x-2qfj-xvq4",
      "modified": "2024-11-07T17:28:59Z",
      "published": "2024-11-07T17:28:59Z",
      "references": [
        {
          "type": "WEB",
          "url": "https://github.com/PHPOffice/PHPExcel/commit/0ab614fd952f82f9b7a9280731daa2300e6b000c"
        },
        {
          "type": "WEB",
          "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/phpoffice/phpexcel/CVE-2015-3542.yaml"
        },
        {
          "type": "PACKAGE",
          "url": "https://github.com/PHPOffice/PHPExcel"
        }
      ],
      "schema_version": "1.4.0",
      "severity": [
        {
          "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
          "type": "CVSS_V4"
        }
      ],
      "summary": "PHPExcel XXE Vulnerability"
    }

    GSD-2015-3542

    Vulnerability from gsd - Updated: 2023-12-13 01:20
    Details
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
    Aliases
    Aliases

    {
      "GSD": {
        "alias": "CVE-2015-3542",
        "id": "GSD-2015-3542"
      },
      "gsd": {
        "metadata": {
          "exploitCode": "unknown",
          "remediation": "unknown",
          "reportConfidence": "confirmed",
          "type": "vulnerability"
        },
        "osvSchema": {
          "aliases": [
            "CVE-2015-3542"
          ],
          "id": "GSD-2015-3542",
          "modified": "2023-12-13T01:20:07.997775Z",
          "schema_version": "1.4.0"
        }
      },
      "namespaces": {
        "cve.org": {
          "CVE_data_meta": {
            "ASSIGNER": "cve@mitre.org",
            "ID": "CVE-2015-3542",
            "STATE": "RESERVED"
          },
          "data_format": "MITRE",
          "data_type": "CVE",
          "data_version": "4.0",
          "description": {
            "description_data": [
              {
                "lang": "eng",
                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
              }
            ]
          }
        }
      }
    }