Lucene search

K
cvelistMitreCVELIST:CVE-2020-13826
HistoryAug 19, 2020 - 7:39 p.m.

CVE-2020-13826

2020-08-1919:39:34
mitre
www.cve.org
4
cve-2020-13826
excel macro injection
formula injection
i-doit
csv export
title parameter
arbitrary commands

EPSS

0.002

Percentile

52.7%

A CSV injection (aka Excel Macro Injection or Formula Injection) issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter that is mishandled in a CSV export.

EPSS

0.002

Percentile

52.7%

Related for CVELIST:CVE-2020-13826