{"id":"CVE-2015-3542","aliases":["GHSA-3m9x-2qfj-xvq4"],"status":"published","title":"PHPExcel XXE Vulnerability","description":"PHPExcel XXE Vulnerability","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-611"],"published":"2024-11-07T17:28:59Z","modified":"2024-11-07T17:59:25Z","fixes":[{"ecosystem":"Packagist","package":"phpoffice/phpexcel","fixed_in":["1.8.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"phpoffice/phpexcel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1"}]}]},{"source":"osv","ecosystem":"Packagist","package":"phpoffice/phpexcel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1"}]}],"versions":["1.7.9","1.7.9-rc1","1.8.0","1.8.0rc1","1.8.0rc2","1.8.0rc3","1.8.0rc4"]}],"references":[{"url":"https://github.com/PHPOffice/PHPExcel/commit/0ab614fd952f82f9b7a9280731daa2300e6b000c","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/phpoffice/phpexcel/CVE-2015-3542.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-3m9x-2qfj-xvq4"},{"url":"https://github.com/PHPOffice/PHPExcel","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-3m9x-2qfj-xvq4","title":"PHPExcel XXE Vulnerability","description":"PHPExcel XXE Vulnerability","status":"published","published":"2024-11-07T17:28:59Z","modified":"2024-11-07T17:29:00Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:38:16.477822Z"}],"osv":[{"id":"GHSA-3m9x-2qfj-xvq4","title":"PHPExcel XXE Vulnerability","description":"PHPExcel XXE Vulnerability","status":"published","published":"2024-11-07T17:28:59Z","modified":"2024-11-07T17:59:25.503866Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T15:46:35.747385Z"}]}}