CVE-2023-7102

Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic.

• CWE-1104

• https://github.com/haile01/perl_spreadsheet_excel_rce_pocThird Party Advisory
• https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171Product
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.mdThird Party Advisory
• https://metacpan.org/dist/Spreadsheet-ParseExcelProduct
• https://www.barracuda.com/company/legal/esg-vulnerabilityVendor Advisory
• https://www.cve.org/CVERecord?id=CVE-2023-7101Third Party Advisory
• https://github.com/haile01/perl_spreadsheet_excel_rce_pocThird Party Advisory
• https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171Product
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.mdThird Party Advisory
• https://metacpan.org/dist/Spreadsheet-ParseExcelProduct
• https://www.barracuda.com/company/legal/esg-vulnerabilityVendor Advisory
• https://www.cve.org/CVERecord?id=CVE-2023-7101Third Party Advisory

Published

Dec 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-7096A flaw has been found in code-projects Faculty Management Sy…9.8
• CVE-2023-7097A vulnerability classified as critical has been found in cod…9.8
• CVE-2023-7098** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…5.3
• CVE-2023-7099A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-7100A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-7101Spreadsheet::ParseExcel version 0.65 is a Perl module used f…7.8
• CVE-2023-7103Authentication Bypass by Primary Weakness vulnerability in Z…9.8
• CVE-2023-7104A vulnerability was found in SQLite SQLite3 up to 3.43.0 and…7.3
• CVE-2023-7105A vulnerability was found in code-projects E-Commerce Websit…9.8
• CVE-2023-7106A vulnerability was found in code-projects E-Commerce Websit…8.8
• CVE-2023-7107A vulnerability was found in code-projects E-Commerce Websit…9.8
• CVE-2023-7108A vulnerability classified as problematic has been found in …6.1