CVE-2021-41824

2021-09-3000:15:07

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.9%

JSON

Craft CMS before 3.7.14 allows CSV injection.

CPENameOperatorVersion
cmseq3.4.62
cmseq3.6.0-RC1
cmseq3.5.13.2
cmseq4.0.11
cmseq3.4.0
cmseq3.4.22.1
cmseq3.4.31
cmseq3.6.0-beta.1.1
cmseq4.0.7
cmseq3.5.0-RC3

Name	Operator	Version
cms	eq	3.4.62
cms	eq	3.6.0-RC1
cms	eq	3.5.13.2
cms	eq	4.0.11
cms	eq	3.4.0
cms	eq	3.4.22.1
cms	eq	3.4.31
cms	eq	3.6.0-beta.1.1
cms	eq	4.0.7
cms	eq	3.5.0-RC3

Rows per page:

1-10 of 2171

References

github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28

github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwq

twitter.com/craftcmsupdates/status/1442928690145366018