CVE-2023-7101 Arbitrary Code Execution (ACE) Vulnerability

Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution ACE vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of...

CVE-2023-7101 Arbitrary Code Execution (ACE) Vulnerability

Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution ACE vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of...

CVE-2023-7101

CVE-2023-7101 affects Spreadsheet::ParseExcel (Perl) v0.65, where an ACE exists due to evaluating unvalidated file input in Number format string handling via eval. This enables arbitrary code execution when parsing Excel files; risk is rated high (CVSS 3.1: AV Local, AC Low, PR None, UI Required,...

Barracuda ESG Spreadsheet::ParseExcel Arbitrary Code Execution

This module exploits CVE-2023-7102, an arbitrary code execution vulnerability in Barracuda Email Security Gateway ESG appliances. The vulnerability exists in how the Amavis scanner processes Excel attachments using the Perl Spreadsheet::ParseExcel library. The library's Utility.pm contains an...

Spreadsheet-ParseExcel Code Injection Vulnerability

Spreadsheet-ParseExcel is a module for extracting information from Excel files by the individual developer John McNamara in Ireland. A security vulnerability exists in Spreadsheet-ParseExcel version 0.65 that originates from passing unvalidated input from a file to a string, resulting in arbitrar...

CVE-2023-7101: Improper Neutralization of Directives in Dynamically Evaluated Code

Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution ACE vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of...

PT-2023-8145

Name of the Vulnerable Software and Affected Versions Barracuda ESG Appliance versions 5.1.3.001 through 9.2.1.001 Description The issue is related to a case of arbitrary code execution that resides within a third-party and open-source library named Spreadsheet::ParseExcel, used by the Amavis...

PT-2023-8146

Name of the Vulnerable Software and Affected Versions Spreadsheet::ParseExcel version 0.65 Description The issue is related to the evaluation of Number format strings within the Excel parsing logic, which allows for arbitrary code execution due to passing unvalidated input from a file into a...

[SECURITY] Fedora 38 Update: libreoffice-7.5.9.2-1.fc38

LibreOffice is an Open Source, community-developed, office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...

CVE-2023-48289

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SpreadsheetConverter Import Spreadsheets from Microsoft Excel allows Stored XSS.This issue affects Import Spreadsheets from Microsoft Excel: from n/a through 10.1.3...

GLSA-202311-15 : LibreOffice: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202311-15 LibreOffice: Multiple Vulnerabilities - Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will...

PT-2023-8033 · Hancom · Hancom Office Cell

Name of the Vulnerable Software and Affected Versions: Hancom Office Cell affected versions not specified Description: This issue is a stack-based buffer overflow in the XLS file parsing functionality of Hancom Office Cell. It allows remote attackers to execute arbitrary code on affected...

Microsoft Excel Code Execution Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Moodle Cross-site Scripting vulnerability

The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content...

CVE-2023-5541

The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content...

CVE-2023-5541

The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content...

CVE-2023-5541 Moodle: xss risk when using csv grade import method

The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content...

CVE-2023-5541

CVE-2023-5541 corresponds to a Moodle CSV grade import method XSS risk. The core detail across connected documents: importing a spreadsheet containing unsafe content can lead to cross-site scripting. Sources (OSV/GHSA) echo this XSS risk, specifically tied to the CSV grade import workflow. The in...

libreoffice: Array index underflow in Calc formula parsing

A vulnerability was found in LibreOffice. Improper validation of the array index in the spreadsheet component of The Document Foundation in LibreOffice allows an attacker to craft a spreadsheet document that causes an array index underflow when loaded. In affected versions of LibreOffice, certain...

Microsoft Excel Information Disclosure Vulnerability (CNVD-2023-80108)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel, which can be exploited by attackers to obtain sensitive information...