Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5fjw-rfff-jp7h

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5

Описание

Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX850, and MP2-MP90 Versions N and prior, IntelliVue X3 and X2 Versions N and prior. The software saves user-provided information into a comma-separated value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software.

Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX850, and MP2-MP90 Versions N and prior, IntelliVue X3 and X2 Versions N and prior. The software saves user-provided information into a comma-separated value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software.

EPSS

Процентиль: 34%
0.00141
Низкий

5 Medium

CVSS3

Дефекты

CWE-1236

Связанные уязвимости

CVSS3: 5
nvd
больше 5 лет назад

In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software.

EPSS

Процентиль: 34%
0.00141
Низкий

5 Medium

CVSS3

Дефекты

CWE-1236