Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2023-7101
HistoryDec 24, 2023 - 10:15 p.m.

Format string

2023-12-2422:15:00
PRIOn knowledge base
www.prio-n.com
5
spreadsheet::parseexcel
0.65
ace vulnerability
unvalidated input
evaluation
number format strings
excel parsing

7.7 High

AI Score

Confidence

Low

0.053 Low

EPSS

Percentile

93.1%

JSON

Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.

CPENameOperatorVersion
debian_linuxeq10.0
fedoraeq38
fedoraeq39

Related

nessus 8
osv 4
openvas 6
cisa_kev 1
ubuntu 1
debian 2
vulnrichment 1
debiancve 1
ubuntucve 1
veracode 1
cve 1
cvelist 1
fedora 2
freebsd 1
attackerkb 2
amazon 1
nvd 1
alpinelinux 1
thn 1
avleonov 1
nessus
nessus
FreeBSD : p5-Spreadsheet-ParseExcel -- Remote Code Execution Vulnerability (cb22a9a6-c907-11ee-8d1c-40b034429ecf)
2024-02-12 00:00:00
Amazon Linux 2023 : perl-Spreadsheet-ParseExcel (ALAS2023-2024-491)
2024-01-23 00:00:00
Spreadsheet::ParseExcel RCE (CVE-2023-7101)
2024-05-17 00:00:00
osv
osv
libspreadsheet-parseexcel-perl - security update
2023-12-31 00:00:00
libspreadsheet-parseexcel-perl vulnerability
2024-05-21 13:21:26
Arbitrary Code Execution (ACE) Vulnerability
2023-12-28 02:15:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:0158-1)
2024-01-19 00:00:00
Debian: Security Advisory (DSA-5592-1)
2024-01-12 00:00:00
Ubuntu: Security Advisory (USN-6781-1)
2024-05-22 00:00:00
cisa_kev
cisa_kev
Spreadsheet::ParseExcel Remote Code Execution Vulnerability
2024-01-02 00:00:00
ubuntu
ubuntu
Spreadsheet::ParseExcel vulnerability
2024-05-21 00:00:00
debian
debian
[SECURITY] [DSA 5592-1] libspreadsheet-parseexcel-perl security update
2023-12-30 16:14:19
[SECURITY] [DLA 3702-1] libspreadsheet-parseexcel-perl security update
2023-12-31 01:09:30
vulnrichment
vulnrichment
CVE-2023-7101 Arbitrary Code Execution (ACE) Vulnerability
2023-12-24 21:34:46
debiancve
debiancve
CVE-2023-7101
2023-12-24 22:15:07
ubuntucve
ubuntucve
CVE-2023-7101
2023-12-24 00:00:00
veracode
veracode
Arbitrary Code Execution
2024-01-12 20:48:40
cve
cve
CVE-2023-7101
2023-12-24 22:15:07
cvelist
cvelist
CVE-2023-7101 Arbitrary Code Execution (ACE) Vulnerability
2023-12-24 21:34:46
fedora
fedora
[SECURITY] Fedora 38 Update: perl-Spreadsheet-ParseExcel-0.6600-1.fc38
2024-01-08 01:34:38
[SECURITY] Fedora 39 Update: perl-Spreadsheet-ParseExcel-0.6600-1.fc39
2024-01-08 01:24:14
freebsd
freebsd
p5-Spreadsheet-ParseExcel -- Remote Code Execution Vulnerability
2023-12-29 00:00:00
attackerkb
attackerkb
CVE-2023-7101
2023-12-24 00:00:00
CVE-2023-7102
2023-12-24 00:00:00
amazon
amazon
Important: perl-Spreadsheet-ParseExcel
2024-01-19 01:19:00
nvd
nvd
CVE-2023-7101
2023-12-24 22:15:07
alpinelinux
alpinelinux
CVE-2023-7101
2023-12-24 22:15:07
thn
thn
Chinese Hackers Exploited New Zero-Day in Barracuda's ESG Appliances
2023-12-27 12:35:00
avleonov
avleonov
November 2023 – January 2024: New Vulristics Features, 3 Months of Microsoft Patch Tuesdays and Linux Patch Wednesdays, Year 2023 in Review
2024-02-01 17:07:20

7.7 High

AI Score

Confidence

Low

0.053 Low

EPSS

Percentile

93.1%

JSON
Related for PRION:CVE-2023-7101
nessus8osv4openvas6cisa_kev1ubuntu1debian2vulnrichment1debiancve1ubuntucve1veracode1cve1cvelist1fedora2freebsd1attackerkb2amazon1nvd1alpinelinux1thn1avleonov1