Design/Logic Flaw

2020-12-2116:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket.

CPENameOperatorVersion
webhelpdeskeq12.7.0

CPE	Name	Operator	Version
	webhelpdesk	eq	12.7.0

References

support.solarwinds.com/SuccessCenter/s/

www.esecforte.com/formula-injection-vulnerability-india-in-solarwinds-web-help-desk/

www.solarwinds.com/free-tools/free-help-desk-software