Known exploited vulnerabilities
Spreadsheet::ParseExcel vulnerabilities attackers have used
Every Spreadsheet::ParseExcel vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 1 Spreadsheet::ParseExcel vulnerability as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2023-7101, added Jan 2, 2024. Spreadsheet::ParseExcel has the most entries (1).
- In KEV, all time
- 1
- Added, last 12 months
- 0
- Used in ransomware
- 0
- New CVEs this week
- 0
Every Spreadsheet::ParseExcel entry in CISA KEV
CVE-2023-7101
Added · dueSpreadsheet::ParseExcel Remote Code Execution Vulnerability
Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel…
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.