Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h5xj-9p36-6cjc

Опубликовано: 26 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack.

Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack.

EPSS

Процентиль: 79%
0.01201
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-1236

Связанные уязвимости

CVSS3: 9.8
nvd
почти 4 года назад

Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack.

EPSS

Процентиль: 79%
0.01201
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-1236