CVE-2015-3542 in PHPExcel

Prediction

by VulDB Data Team • 11/07/2024

A vulnerability was detected in phpoffice PHPExcel up to 1.8.0. Affected by this vulnerability is an unknown functionality. The manipulation results in xml external entity reference. It is possible to launch the attack remotely. Upgrading to version 1.8.1 addresses this issue. Upgrading the affected component is recommended.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 04/30/2015
• Moderation: accepted
• Entry: VDB-283471
• CPE: ready
• CWE: CWE-611 (confirmed)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00471
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-3542
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-3542
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-3542/