Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%

CVE-2024-22368

EPSS 0.06% · P19
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-22368

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because the memoize implementation does not have appropriate constraints on merged cells.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Spreadsheet::ParseXLSX 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Spreadsheet::ParseXLSX是一个 XLSX 文件解析器。 Spreadsheet::ParseXLSX 0.28之前版本存在安全漏洞,该漏洞源于memoize没有对合并的单元格进行适当的约束,导致在解析XLSX文档时会遇到内存不足的情况。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2024-22368

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-22368

登录查看更多情报信息。

Mailing List Discussions for CVE-2024-22368 (3)

Security Blog Posts for CVE-2024-22368 (1)

Other References for CVE-2024-22368 (2)

Same Patch Batch · n/a · 2024-01-09 · 30 CVEs total

CVE-2023-509328.3 HIGHsavignano S/Notify 安全漏洞
CVE-2023-509318.3 HIGHsavignano S/Notify 安全漏洞
CVE-2023-509308.3 HIGHsavignano S/Notify 安全漏洞
CVE-2024-03527.3 HIGHLikeshop HTTP POST Request File.php userFormImage unrestricted upload
CVE-2024-03426.3 MEDIUMInis Sqlite.php sql injection
CVE-2024-03413.5 LOWInis GET Request File.php path traversal
CVE-2023-49237TRENDnet TV-IP1314PI 安全漏洞
CVE-2023-47997FreeImage 安全漏洞
CVE-2023-47996FreeImage 安全漏洞
CVE-2023-47995FreeImage 安全漏洞
CVE-2023-50136JFinalCMS 安全漏洞
CVE-2023-47994FreeImage 安全漏洞
CVE-2023-47993FreeImage 安全漏洞
CVE-2023-47992FreeImage 安全漏洞
CVE-2023-38827Follet School Solutions Destiny 安全漏洞
CVE-2022-28975Infoblox NIOS 跨站脚本漏洞
CVE-2023-50974Appwrite 安全漏洞
CVE-2023-50585Tenda A18 安全漏洞
CVE-2023-27000NetScout nGeniusONE 跨站脚本漏洞
CVE-2023-49236TRENDnet TV-IP1314PI 安全漏洞

Showing top 20 of 30 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2024-22368

No comments yet


Leave a comment