Vulnerabilities CVE-2023-7101

CVE-2023-7101

Medium

Open

KEV

TLP:CLEAR

Spreadsheet::ParseExcel Remote Code Execution Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Spreadsheet::ParseExcel — Spreadsheet::ParseExcel — Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.

Details

EPSS Score ⓘ: 16.83%

96.7th percentile
Confidence: 100%
CISA KEV
Date Added: Jan 2, 2024
Patch Due: Jan 23, 2024
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.