/ 
Spreadsheet-ParseExcel-0.27
Security Advisories (1)
CVE-2023-7101 (2023-12-24)

Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.

Changes for version 0.27

  • See changes in the 0.27_XX versions

Changes for version 0.27_03

  • Officially receive maintainership (Gabor Szabo)
  • slight code cleanup
  • more sample test

Changes for version 0.27_02

  • Fixing another warning: Character in 'c' format wrapped in pack http://rt.cpan.org/Ticket/Display.html?id=18063 (Grant Stevens)
  • More test, enable use of Devel::Cover

Changes for version 0.27_01

  • Moving test.pl to t/ and using Test::More
  • Add tests running (some of the) sample files
  • Add 'use warnings', remove prototypes
  • Fix the warning in Spreadsheet::ParseExcel::FmtDefault Character in "C" format wrapped at .../Spreadsheet/ParseExcel/FmtDefault.pm line 68. http://rt.cpan.org/Public/Bug/Display.html?id=7376 (Slaven Rezić and others)

Modules

Spreadsheet::ParseExcel
Get information from Excel file
Spreadsheet::ParseExcel::SaveParser
Expand of Spreadsheet::ParseExcel with Spreadsheet::WriteExcel
Spreadsheet::ParseExcel::Utility
Utility function for Spreadsheet::ParseExcel

Provides

Spreadsheet::ParseExcel::Cell
in lib/Spreadsheet/ParseExcel.pm
Spreadsheet::ParseExcel::Dump
in lib/Spreadsheet/ParseExcel/Dump.pm
Spreadsheet::ParseExcel::FmtDefault
in lib/Spreadsheet/ParseExcel/FmtDefault.pm
Spreadsheet::ParseExcel::FmtJapan
in lib/Spreadsheet/ParseExcel/FmtJapan.pm
Spreadsheet::ParseExcel::FmtJapan2
in lib/Spreadsheet/ParseExcel/FmtJapan2.pm
Spreadsheet::ParseExcel::FmtUnicode
in lib/Spreadsheet/ParseExcel/FmtUnicode.pm
Spreadsheet::ParseExcel::Font
in lib/Spreadsheet/ParseExcel.pm
Spreadsheet::ParseExcel::Format
in lib/Spreadsheet/ParseExcel.pm
Spreadsheet::ParseExcel::SaveParser::Workbook
in lib/Spreadsheet/ParseExcel/SaveParser.pm
Spreadsheet::ParseExcel::SaveParser::Worksheet
in lib/Spreadsheet/ParseExcel/SaveParser.pm
Spreadsheet::ParseExcel::Workbook
in lib/Spreadsheet/ParseExcel.pm
Spreadsheet::ParseExcel::Worksheet
in lib/Spreadsheet/ParseExcel.pm

Examples

Other files