---
cve: "CVE-2023-7102"
severity: "LOW"
cvss: 3.1
epss: "43.6%"
vendor: "Barracuda Networks Inc."
kev: false
exploited: false
published: "2023-12-24 22:15:08"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-14T22:16:56+02:00"
---

# CVE-2023-7102

> 3.1 LOW · 🧪 PoC

## Beschreibung

Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic.

## Referenzen

- <https://www.barracuda.com/company/legal/esg-vulnerability>
- <https://www.cve.org/CVERecord?id=CVE-2023-7101>
- <https://metacpan.org/dist/Spreadsheet-ParseExcel>
- <https://github.com/haile01/perl_spreadsheet_excel_rce_poc>
- <https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171>
- <https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2023-7102) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_