Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic.
References
| Link | Resource |
|---|---|
| https://github.com/haile01/perl_spreadsheet_excel_rce_poc | Third Party Advisory |
| https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171 | Product |
| https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md | Third Party Advisory |
| https://metacpan.org/dist/Spreadsheet-ParseExcel | Product |
| https://www.barracuda.com/company/legal/esg-vulnerability | Vendor Advisory |
| https://www.cve.org/CVERecord?id=CVE-2023-7101 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
History
No history.
Information
Published : 2023-12-24 22:15
Updated : 2024-01-09 20:07
NVD link : CVE-2023-7102
Mitre link : CVE-2023-7102
CVE.ORG link : CVE-2023-7102
JSON object : View
Products Affected
barracuda
- email_security_gateway_300
- email_security_gateway_800_firmware
- email_security_gateway_300_firmware
- email_security_gateway_800
- email_security_gateway_600_firmware
- email_security_gateway_400_firmware
- email_security_gateway_400
- email_security_gateway_900
- email_security_gateway_900_firmware
- email_security_gateway_600
CWE