Lucene search

K
osvGoogleOSV:GHSA-F9P3-H6CG-2CJR
HistoryMay 03, 2022 - 12:00 a.m.

Improper neutralization of formula elements in yii-helpers

2022-05-0300:00:46
Google
osv.dev
11
yii-helpers
formula injection
csv injection
github repository
luyadev
version 1.2.1
exploitation
command injection
code execution
remote ex-filtration
confidential data.

EPSS

0.001

Percentile

49.0%

Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1. Successful exploitation can lead to impacts such as client-sided command injection, code execution, or remote ex-filtration of contained confidential data.

EPSS

0.001

Percentile

49.0%

Related for OSV:GHSA-F9P3-H6CG-2CJR