Skip to content

Product

Douglas Wilson Spreadsheet::ParseExcel vulnerabilities

1 published CVE affecting Douglas Wilson Spreadsheet::ParseExcel, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
1

Latest Douglas Wilson Spreadsheet::ParseExcel CVEs

Newest publication first

  1. CVE-2023-7101 Arbitrary Code Execution (ACE) Vulnerability

    Published
    HighCVSS 7.8 EPSS 19.0% CISA KEV added 2024-01-02 Exploited in the wild Framework module

    Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.