PhpSpreadsheet SSRF Bypass via HTTP Redirect in WEBSERVICE Function
Security AdvisoryHighPhpSpreadsheet
Affected:
- PhpSpreadsheet >=4.0.0 <=5.8.0
- PhpSpreadsheet >=3.3.0 <=3.10.6
- PhpSpreadsheet >=2.2.0 <=2.4.6
- PhpSpreadsheet >=2.0.0 <=2.1.17
- PhpSpreadsheet <=1.30.5
Fixed in:
- 5.8.1
- 3.10.7
- 2.4.7
- 2.1.18
- 1.30.6
参照 CVE: CVE-2026-59931 · 7.7
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 github.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。