Lucene search

K
nvd[email protected]NVD:CVE-2023-36527
HistoryNov 07, 2023 - 4:15 p.m.

CVE-2023-36527

2023-11-0716:15:28
CWE-1236
web.nvd.nist.gov
2
cve
vulnerability
bestwebsoft
post to csv
file
formula

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

19.3%

Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This issue affects Post to CSV by BestWebSoft: from n/a through 1.4.0.

Affected configurations

Nvd
Node
bestwebsoftpost_to_csvRange1.4.0wordpress
VendorProductVersionCPE
bestwebsoftpost_to_csv*cpe:2.3:a:bestwebsoft:post_to_csv:*:*:*:*:*:wordpress:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

19.3%

Related for NVD:CVE-2023-36527