CVE-2023-7102
Remote Code Execution (RCE) Vulnerability
- State
- Published
- Severity
- Not scored
- Published
- Dec 24, 2023
- Updated
- Aug 2, 2024
- Reserved
- Dec 24, 2023
Description
Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic.
Scores
The record has no CVSS score.
Weaknesses
- CWE-1104 Use of Unmaintained Third Party Components
Affected Products
| Product | Versions |
|---|---|
Barracuda ESG ApplianceBarracuda Networks Inc. |
|
References
- https://www.barracuda.com/company/legal/esg-vulnerability
- https://www.cve.org/CVERecord?id=CVE-2023-7101
- https://metacpan.org/dist/Spreadsheet-ParseExcel
- https://github.com/haile01/perl_spreadsheet_excel_rce_poc
- https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.