{"id":"GHSA-3m9x-2qfj-xvq4","aliases":["CVE-2015-3542"],"title":"PHPExcel XXE Vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"PHPExcel XXE Vulnerability","severity":"high","score":8.7,"published":"2024-11-07T17:28:59.000Z","modified":"2024-11-07T17:59:25.503Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"phpoffice/phpexcel","sources":[{"name":"OSV · GHSA-3m9x-2qfj-xvq4","url":"https://osv.dev/vulnerability/GHSA-3m9x-2qfj-xvq4"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.8.1"}],"type":"ECOSYSTEM"}],"versions":["1.7.9","1.7.9-rc1","1.8.0","1.8.0rc1","1.8.0rc2","1.8.0rc3","1.8.0rc4"],"fixed":["1.8.1"]}],"sourceAffected":[],"references":["https://github.com/PHPOffice/PHPExcel/commit/0ab614fd952f82f9b7a9280731daa2300e6b000c","https://github.com/FriendsOfPHP/security-advisories/blob/master/phpoffice/phpexcel/CVE-2015-3542.yaml","https://github.com/PHPOffice/PHPExcel"],"sources":[{"name":"OSV","id":"GHSA-3m9x-2qfj-xvq4","modified":"2024-11-07T17:59:25.503866Z","url":"https://osv.dev/vulnerability/GHSA-3m9x-2qfj-xvq4"}],"assessments":[{"source":"OSV","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","score":8.7}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T02:30:33.887Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}