Lucene search
@huntrdevCVELIST:CVE-2023-3302HistoryJun 23, 2023 - 12:00 a.m.
CVE-2023-3302 Improper Neutralization of Formula Elements in a CSV File in admidio/admidio
2023-06-2300:00:00
CWE-1236
@huntrdev
www.cve.org
3
cve-2023-3302
github repository
prior to 4.2.9
CVSS3
6.6
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
26.0%
Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9.
CNA Affected
[
{
"vendor": "admidio",
"product": "admidio/admidio",
"versions": [
{
"version": "unspecified",
"lessThan": "4.2.9",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
huntr
huntr
Formula Injection vulnerability in CSV export feature
2023-06-06 15:44:10
veracode
veracode
Command Injection
2023-06-29 07:36:54
github
github
cve
cve
CVE-2023-3302
2023-06-23 13:15:10
nvd
nvd
CVE-2023-3302
2023-06-23 13:15:10
osv
osv
CVE-2023-3302
2023-06-23 13:15:10
gitlab
gitlab
Improper Neutralization of Formula Elements in a CSV File
2023-06-23 00:00:00
prion
prion
Input validation
2023-06-23 13:15:00
CVSS3
6.6
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
26.0%
Related for CVELIST:CVE-2023-3302