Lucene search

K
huntrSaharshtapiE57C36E7-FA39-435F-944A-3A52EE066F73
HistoryJun 11, 2022 - 9:08 a.m.

Formula Injection Part Description

2022-06-1109:08:25
saharshtapi
www.huntr.dev
13

0.002 Low

EPSS

Percentile

56.5%

Description

Formula Injection/CSV Injection in inventree due to Improper Neutralization of Formula Elements in CSV File.

Proof of Concept

Video PoC link:
https://drive.google.com/file/d/1mf_BTUDS1iZ4uJfBpc56_8WgpdZdN5_f/view?usp=sharing

0.002 Low

EPSS

Percentile

56.5%

Related for E57C36E7-FA39-435F-944A-3A52EE066F73