Lucene search

K
osvGoogleOSV:CVE-2021-40848
HistoryNov 03, 2021 - 11:15 a.m.

CVE-2021-40848

2021-11-0311:15:08
Google
osv.dev
5
mahara
csv
injection
security
vulnerability
spreadsheet
program
execution
malicious
string
device

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

35.0%

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interpret as a command, leading to execution of a malicious string locally on a device, aka CSV injection.

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

35.0%

Related for OSV:CVE-2021-40848