CVE-2023-7102

Katalog CVE

CVSS 9.8 · Critical EPSS 44,6%

Kerentanan Use of Unmaintained Third Party Components pada barracuda email security gateway 300 firmware, barracuda email security gateway 400 firmware +3 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic.

Rincian

Terbit di NVD

24 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1104: Use of Unmaintained Third Party Components

EPSS (30 hari)

44,6% peluang dieksploitasi; lebih tinggi dari 98,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.barracuda.com/company/legal/esg-vulnerability advisory vendor
• https://github.com/haile01/perl_spreadsheet_excel_rce_poc advisory pihak ketiga
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md advisory pihak ketiga
• https://www.cve.org/CVERecord?id=CVE-2023-7101 advisory pihak ketiga
• https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsh... product
• https://metacpan.org/dist/Spreadsheet-ParseExcel product