PatchSiren

Spreadsheet::ParseExcel CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Known exploited Spreadsheet::ParseExcel CVE published 2024-01-02

CVE-2023-7101

CVE-2023-7101 is a remote code execution vulnerability affecting Spreadsheet::ParseExcel and is listed in CISA’s Known Exploited Vulnerabilities catalog. Because it is KEV-listed, defenders should treat it as an active risk and prioritize vendor guidance, mitigations, or removal of the component if mitigations are not available.