CVE-2021-27839

2021-03-0319:15:13

Google

osv.dev

cve-2021-27839

online invoicing system

csv injection

vulnerability

malicious actions

harmful websites

clients' details

software

AI Score

Confidence

High

EPSS

0.001

Percentile

25.1%

JSON

A CSV injection vulnerability found in Online Invoicing System (OIS) 4.3 and below can be exploited by users to perform malicious actions such as redirecting admins to unknown or harmful websites, or disclosing other clients’ details that the user did not have access to.