CVE-2025-48882 Details
Description
PHPOffice Math is a library that provides a set of classes to manipulate different formula file formats. Prior to version 0.3.0, loading XML data using the standard `libxml` extension and the `LIBXML_DTDLOAD` flag without additional filtration, leads to XXE. Version 0.3.0 fixes the vulnerability.
A vulnerability allowing XML External Entity (XXE) injection has been identified in PHPOffice Math versions prior to 0.3.0. This issue arises when XML data is loaded using the standard libxml extension with the LIBXML_DTDLOAD flag, without proper filtration. The vulnerability allows attackers to read local server files by creating a specially crafted XML file that exploits the XXE flaw. The MathML class is specifically affected, as the vulnerability only occurs when processing files in the MathML format.
Users are advised to update to PHPOffice Math version 0.3.0 or later, where this vulnerability has been fixed. If an immediate update is not possible, and the LIBXML_DTDLOAD flag must be used, it is recommended to implement a custom external entity loader function to filter external entities and prevent XXE attacks.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 30, 2025CISA-ADP
Assessed May 30, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/PHPOffice/Math/commit/fc31c8f57a7a81f962cbf389fd89f4d9d06fc99a | [email protected] | Source CodeVendor |
| https://github.com/PHPOffice/Math/security/advisories/GHSA-42hm-pq2f-3r7m | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-611 | Improper Restriction of XML External Entity Reference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| PHPOffice Math | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 30, 2025 | New CVE Received | [email protected] |