Lucene search
China National Vulnerability DatabaseCNVD-2022-58956HistoryJun 21, 2022 - 12:00 a.m.
InvenTree CSV Injection Vulnerability
2022-06-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
0.002 Low
EPSS
Percentile
56.5%
InvenTree is InvenTree open source an open source inventory management system . A CSV injection vulnerability exists in versions prior to InvenTree 0.7.2, which stems from an application that does not filter the data escaping for formula elements in CSV files. No details of the vulnerability are currently available.
| CPE | Name | Operator | Version |
|---|---|---|---|
| inventree inventree | lt | 0.7.2 |
Related
github
github
CSV Injection in inventree
2022-06-18 00:00:25
huntr
huntr
Formula Injection Part Description
2022-06-11 09:08:25
cve
cve
CVE-2022-2112
2022-06-17 13:15:13
prion
prion
Design/Logic Flaw
2022-06-17 13:15:00
nvd
nvd
CVE-2022-2112
2022-06-17 13:15:13
cvelist
cvelist
osv
osv
CSV Injection in inventree
2022-06-18 00:00:25
CVE-2022-2112
2022-06-17 13:15:13