6271 matches found
Input validation
csvbuilder.rb in ActiveAdmin aka Active Admin before 3.2.0 allows CSV injection...
CVE-2023-51763
csvbuilder.rb in ActiveAdmin aka Active Admin before 3.2.0 allows CSV injection...
CVE-2023-51763
csvbuilder.rb in ActiveAdmin aka Active Admin before 3.2.0 allows CSV injection...
CVE-2023-51763: Improper Neutralization of Formula Elements in a CSV File
csvbuilder.rb in ActiveAdmin aka Active Admin before 3.2.0 allows CSV injection...
CVE-2023-51763
ActiveAdmin CSV injection CVE-2023-51763 affects csv_builder.rb in ActiveAdmin prior to 3.2.0. The underlying issue is that spreadsheet formulas could be uploaded/exported via CSV, allowing injection when opened in programs like LibreOffice. The Red Hat and GitHub advisories corroborate the issue...
ActiveAdmin vulnerable to CSV injection
csvbuilder.rb in ActiveAdmin aka Active Admin before 3.2.0 allows CSV injection...
ActiveAdmin vulnerable to CSV injection
In ActiveAdmin versions prior to 3.2.0, maliciously crafted spreadsheet formulas could be uploaded as part of admin data that, when exported to a CSV file and the imported to a spreadsheet program like libreoffice, could lead to remote code execution and private data exfiltration. The attacker...
PT-2023-31887 · Unknown · Activeadmin
Name of the Vulnerable Software and Affected Versions: ActiveAdmin versions prior to 3.2.0 Description: The issue allows CSV injection, which can lead to remote code execution and private data exfiltration when maliciously crafted spreadsheet formulas are uploaded and imported into a spreadsheet...
Security Bulletin: IBM Security Guardium is affected by a CSV Injection vulnerability (CVE-2023-42004)
Summary IBM Security Guardium has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2023-42004 DESCRIPTION: IBM Security Guardium is potentially vulnerable to CSV injection. A remote attacker could execute malicious commands due to improper validation of csv file contents...
CVE-2023-5886
CVE-2023-5886 affects the WP All Export (Free < 1.4.1) and WP All Export Pro (
CVE-2023-5886: Cross-Site Request Forgery (CSRF)
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers with the ability to upload files to make logged in users perform unwanted actions leading t...
CVE-2023-4724: Undefined Security Weakness
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the wpquery parameter which allows an attacker to run arbitrary command on the remote server...
PT-2023-30383 · WordPress · Wp All Export Pro +1
Name of the Vulnerable Software and Affected Versions: Export any WordPress data to XML/CSV WordPress plugin versions prior to 1.4.0 WP All Export Pro WordPress plugin versions prior to 1.8.6 Description: The issue concerns the lack of validation and sanitization of the wp query parameter, allowi...
PT-2023-32392 · WordPress · Export Any Wordpress Data To Xml/Csv +1
Name of the Vulnerable Software and Affected Versions: Export any WordPress data to XML/CSV WordPress plugin versions prior to 1.4.0 WP All Export Pro WordPress plugin versions prior to 1.8.6 Description: The issue allows attackers to make logged-in users perform unwanted actions, leading to remo...
CVE-2023-5882: Cross-Site Request Forgery (CSRF)
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers to make logged in users perform unwanted actions leading to remote code execution...
CVE-2023-49775
Cross-Site Request Forgery CSRF vulnerability in Denis Kobozev CSV Importer.This issue affects CSV Importer: from n/a through 0.3.8...
CVE-2023-49775
Cross-Site Request Forgery CSRF vulnerability in Denis Kobozev CSV Importer.This issue affects CSV Importer: from n/a through 0.3.8...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Denis Kobozev CSV Importer.This issue affects CSV Importer: from n/a through 0.3.8...
CVE-2023-49775 WordPress CSV Importer Plugin <= 0.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Denis Kobozev CSV Importer.This issue affects CSV Importer: from n/a through 0.3.8...