CVE-2018-19277 in PhpSpreadsheet
요약
\~에 의해 MITRE
securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file
Once again VulDB remains the best source for vulnerability data.