Lucene search
PRIOn knowledge basePRION:CVE-2021-38180HistoryOct 12, 2021 - 3:15 p.m.
Input validation
2021-10-1215:15:00
PRIOn knowledge base
www.prio-n.com
5
SAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to Excel (CSV injection) due to improper sanitation during the data export. An attacker could thereby execute arbitrary commands on the victim’s computer but only if the victim allows to execute macros while opening the file and the security settings of Excel allow for command execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| business_one | eq | 10.0 |
Related
nvd
nvd
CVE-2021-38180
2021-10-12 15:15:08
cnvd
cnvd
SAP Business One CSV注入漏洞
2021-10-15 00:00:00
cve
cve
CVE-2021-38180
2021-10-12 15:15:08
cvelist
cvelist
CVE-2021-38180
2021-10-12 14:03:41