CVE-2022-39217

🗓️ 16 Sep 2022 23:20:10Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 303 Views

GitHub action some-natalie/ghas-to-csv (GitHub Advanced Security to CSV) allows execution of code from API output in CSV fil

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-39217	17 Sep 202207:29	–	circl
CNNVD	GitHub Advanced Security to CSV 安全漏洞	17 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-39217 Improper Neutralization of Formula Elements in a CSV File in ghas-to-csv	16 Sep 202223:20	–	cvelist
EUVD	EUVD-2022-6716	3 Oct 202520:07	–	euvd
Github Security Blog	ghas-to-csv vulnerable to Improper Neutralization of Formula Elements in a CSV File	16 Sep 202222:06	–	github
NVD	CVE-2022-39217	17 Sep 202200:15	–	nvd
OSV	CVE-2022-39217 Improper Neutralization of Formula Elements in a CSV File in ghas-to-csv	16 Sep 202223:20	–	osv
OSV	GHSA-634P-93H9-92VH ghas-to-csv vulnerable to Improper Neutralization of Formula Elements in a CSV File	16 Sep 202222:06	–	osv
Prion	Code injection	17 Sep 202200:15	–	prion
RedhatCVE	CVE-2022-39217	22 May 202522:06	–	redhatcve

NVD

Node

ghas-to-csv_project ghas-to-csvRange<1

[
  {
    "product": "ghas-to-csv",
    "vendor": "some-natalie",
    "versions": [
      {
        "status": "affected",
        "version": "< v1"
      }
    ]
  }
]

Source	Link
github	www.github.com/some-natalie/ghas-to-csv/commit/d0b521928fa734513b5cd9c7d9d8e09db50e884a
github	www.github.com/some-natalie/ghas-to-csv/security/advisories/GHSA-634p-93h9-92vh

21 Nov 2024 07:17Current

7.7High risk

Vulners AI Score7.7

CVSS 3.15.8 - 9.8

EPSS0.00423

SSVC

CWE-74