Threat intelligence / Vulnerability
CVE-2023-7101
Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.
Vulnerability
TypeVulnerability
External ID—
First seen2024-01-02
Last seen2024-01-02
Confidence
—
Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.
Labels
CISA KEV context
Vendor / productSpreadsheet::ParseExcel Spreadsheet::ParseExcel
Added2024-01-02
Due date2024-01-23
2 recorded
Relationships
2 external