{"id":"GHSA-3m9x-2qfj-xvq4","summary":"PHPExcel XXE Vulnerability","details":"PHPExcel XXE Vulnerability","aliases":["CVE-2015-3542"],"modified":"2024-11-07T17:59:25.503866Z","published":"2024-11-07T17:28:59Z","database_specific":{"nvd_published_at":null,"cwe_ids":["CWE-611"],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2024-11-07T17:28:59Z"},"references":[{"type":"WEB","url":"https://github.com/PHPOffice/PHPExcel/commit/0ab614fd952f82f9b7a9280731daa2300e6b000c"},{"type":"WEB","url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/phpoffice/phpexcel/CVE-2015-3542.yaml"},{"type":"PACKAGE","url":"https://github.com/PHPOffice/PHPExcel"}],"affected":[{"package":{"name":"phpoffice/phpexcel","ecosystem":"Packagist","purl":"pkg:composer/phpoffice/phpexcel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1"}]}],"versions":["1.7.9","1.7.9-rc1","1.8.0","1.8.0rc1","1.8.0rc2","1.8.0rc3","1.8.0rc4"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/11/GHSA-3m9x-2qfj-xvq4/GHSA-3m9x-2qfj-xvq4.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}]}