Lucene search

K
osvGoogleOSV:CVE-2022-1544
HistoryMay 01, 2022 - 12:15 p.m.

CVE-2022-1544

2022-05-0112:15:07
Google
osv.dev
3
formula injection
csv injection
github
yii-helpers
software
code execution
remote ex-filtration

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

49.0%

Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1. Successful exploitation can lead to impacts such as client-sided command injection, code execution, or remote ex-filtration of contained confidential data.

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

49.0%