Spreadsheet::XLSX before 0.19 allows code execution via ExcelFmt eval
A crafted Excel number-format condition is passed to Perl string eval inside ExcelFmt.
1 stories, newest first · one card per story
A crafted Excel number-format condition is passed to Perl string eval inside ExcelFmt.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views