phpoffice/phpspreadsheet vulnerabilities (TuxCare)
12 vulnerabilities.
-
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service 8.8 High -
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS) 8.7 High -
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service 8.8 High -
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading 6.4 Medium -
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion 7.5 High -
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion 7.5 High -
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet: CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions 7.5 High -
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet: CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader 7.5 High -
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet SSRF and RCE via PHP stream wrappers in IOFactory::load 9.2 Critical -
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet vulnerable to XSS in HTML writer via custom number format codes 5.4 Medium -
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet XSS via number format text substitution in HTML Writer 4.8 Medium -
phpoffice/phpspreadsheetTuxCare PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser 8.7 High