2023-12-25 05:00:29 +00:00

52 lines
1.6 KiB
JSON

{
"id": "CVE-2023-7102",
"sourceIdentifier": "mandiant-cve@google.com",
"published": "2023-12-24T22:15:08.107",
"lastModified": "2023-12-25T03:08:09.833",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic.\n\n"
}
],
"metrics": {},
"weaknesses": [
{
"source": "mandiant-cve@google.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1104"
}
]
}
],
"references": [
{
"url": "https://github.com/haile01/perl_spreadsheet_excel_rce_poc",
"source": "mandiant-cve@google.com"
},
{
"url": "https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171",
"source": "mandiant-cve@google.com"
},
{
"url": "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md",
"source": "mandiant-cve@google.com"
},
{
"url": "https://metacpan.org/dist/Spreadsheet-ParseExcel",
"source": "mandiant-cve@google.com"
},
{
"url": "https://www.barracuda.com/company/legal/esg-vulnerability",
"source": "mandiant-cve@google.com"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2023-7101",
"source": "mandiant-cve@google.com"
}
]
}