Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginni
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 proof of concept on GitHub
- Exploitation: poc
- Automatable: yes
- Technical impact: total
Summary
Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IF(A1=200, eval("import('os').system( substring.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: poc · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- n/a n/a
Version range not reported
- pycelPyPI
through 1.0-beta0; through 1.0-beta11; through 1.0-beta12; through 1.0-beta13; through 1.0-beta14; through 1.0-beta15; through 1.0-beta16; through 1.0-beta17; through 1.0-beta18; through 1.0-beta19; through 1.0-beta2; through 1.0-beta20; through 1.0-beta21; through 1.0-beta22; through 1.0-beta26; through 1.0-beta27; through 1.0-beta28; through 1.0-beta29; through 1.0-beta3; through 1.0-beta30; through 1.0-beta4; through 1.0-beta5; through 1.0-beta6; through 1.0-beta7; through 1.0-beta8
- pycelPyPI
through 1.0b30