FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-05-01 20:12:40 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
cb22a9a6-c907-11ee-8d1c-40b034429ecf	p5-Spreadsheet-ParseExcel -- Remote Code Execution Vulnerability Spreadsheet-ParseExcel reports: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type eval "eval". Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic. Discovery 2023-12-29 Entry 2024-02-11 p5-Spreadsheet-ParseExcel < 0.66 CVE-2023-7101 https://nvd.nist.gov/vuln/detail/CVE-2023-7101

VuXML ID

Description

cb22a9a6-c907-11ee-8d1c-40b034429ecf

p5-Spreadsheet-ParseExcel -- Remote Code Execution Vulnerability

Spreadsheet-ParseExcel reports:

Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type eval "eval". Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.

Discovery 2023-12-29
Entry 2024-02-11
p5-Spreadsheet-ParseExcel

< 0.66

CVE-2023-7101
https://nvd.nist.gov/vuln/detail/CVE-2023-7101