CVE-2019-11819

2019-05-0816:29:00

Google

osv.dev

7.5 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.8%

JSON

Alkacon OpenCMS v10.5.4 and before is affected by CSV (aka Excel Macro) Injection in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp) via the First Name or Last Name.

CPENameOperatorVersion
opencms-coreeqbuild_5_0_0_beta_2
opencms-coreeqbuild_5_1_1
opencms-coreeqbuild_10_5_0_beta
opencms-coreeqbuild_5_1_12
opencms-coreeqbuild_7_9_2
opencms-coreeqbuild_5_9_2
opencms-coreeqbuild_7_5_0_beta_1
opencms-coreeqbuild_8_5_0
opencms-coreeqbuild_5_1_3
opencms-coreeqbuild_10_5_4

Name	Operator	Version
opencms-core	eq	build_5_0_0_beta_2
opencms-core	eq	build_5_1_1
opencms-core	eq	build_10_5_0_beta
opencms-core	eq	build_5_1_12
opencms-core	eq	build_7_9_2
opencms-core	eq	build_5_9_2
opencms-core	eq	build_7_5_0_beta_1
opencms-core	eq	build_8_5_0
opencms-core	eq	build_5_1_3
opencms-core	eq	build_10_5_4