Lucene search
@huntrdevCVE-2023-3302HistoryJun 23, 2023 - 1:15 p.m.
CVE-2023-3302
2023-06-2313:15:10
CWE-1236
@huntrdev
web.nvd.nist.gov
30
cve-2023-3302
improper neutralization
formula elements
csv file
github
repository
admidio
nvd
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
26.0%
Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9.
Affected configurations
Node
admidioadmidioRange<4.2.9
CNA Affected
[
{
"vendor": "admidio",
"product": "admidio/admidio",
"versions": [
{
"version": "unspecified",
"lessThan": "4.2.9",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
huntr
huntr
Formula Injection vulnerability in CSV export feature
2023-06-06 15:44:10
veracode
veracode
Command Injection
2023-06-29 07:36:54
github
github
nvd
nvd
CVE-2023-3302
2023-06-23 13:15:10
osv
osv
CVE-2023-3302
2023-06-23 13:15:10
gitlab
gitlab
Improper Neutralization of Formula Elements in a CSV File
2023-06-23 00:00:00
prion
prion
Input validation
2023-06-23 13:15:00
cvelist
cvelist
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
26.0%
Related for CVE-2023-3302