Lucene search

K
osvGoogleOSV:CVE-2021-43515
HistoryApr 08, 2022 - 5:15 p.m.

CVE-2021-43515

2022-04-0817:15:08
Google
osv.dev
6
cve-2021-43515
excel macro injection
formula injection
timesheet
kimai
csv
export
malicious payload

EPSS

0.001

Percentile

26.4%

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai. By filling the Description field with malicious payload, it will be mistreated while exporting to a CSV file.

EPSS

0.001

Percentile

26.4%

Related for OSV:CVE-2021-43515