Lucene search
MitreCVE-2022-44830HistoryNov 21, 2022 - 6:15 p.m.
CVE-2022-44830
2022-11-2118:15:25
CWE-1236
mitre
web.nvd.nist.gov
28
4
cve-2022-44830
sourcecodester
event registration app
csv injection
nvd
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
36.3%
Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the First Name, Contact and Remarks fields. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file.
Affected configurations
Node
event_registration_application_projectevent_registration_applicationMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| event_registration_application_project | event_registration_application | 1.0 | cpe:2.3:a:event_registration_application_project:event_registration_application:1.0:*:*:*:*:*:*:* |
Social References
More
Related
nvd
nvd
CVE-2022-44830
2022-11-21 18:15:25
cnvd
cnvd
Event Registration App CSV Injection Vulnerability
2022-11-23 00:00:00
prion
prion
Input validation
2022-11-21 18:15:00
cvelist
cvelist
CVE-2022-44830
2022-11-21 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
36.3%
Related for CVE-2022-44830