PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2014-06-04T14:00:00
Updated: 2024-08-06T09:58:16.333Z
Reserved: 2014-02-19T00:00:00
Link: CVE-2014-2054
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2014-06-04T14:55:03.983
Modified: 2014-06-04T18:34:17.347
Link: CVE-2014-2054
Redhat
No data.