Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-06512
HistoryNov 30, 2021 - 12:00 a.m.

Unspecified vulnerability in html2csv

2021-11-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.003 Low

EPSS

Percentile

71.9%

Html2Csv is an open source utility. It is used to extract tables from Html documents and convert them to Csv format. html2csv suffers from a security vulnerability that stems from the fact that when a formula is embedded in an HTML page, the formula will be accepted without any validation and pushed when converting it to a CSV file. In this way, an attacker can exploit the vulnerability participants can embed or generate malicious links or execute commands via CSV files.

0.003 Low

EPSS

Percentile

71.9%