Описание
The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then triggered in exported data viewers.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phppointofsale:php_point_of_sale:19.0:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00473
Низкий
8.8 High
CVSS3
Дефекты
CWE-1236
CWE-1236
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then triggered in exported data viewers.
EPSS
Процентиль: 64%
0.00473
Низкий
8.8 High
CVSS3
Дефекты
CWE-1236
CWE-1236