780 matches found
CVE-2023-36250
CVE-2023-36250 CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record. Vulnerability Type CSV Injection Discoverer Bruno Teixeira Reference http://gnome.com Affected Product Code Base GNOME...
CVE-2026-129133
The Meeting Room Booking System (MRBS) version before 1.13.0 is vulnerable to a CSV formula injection vulnerability in the web/report.php component. The root cause is that the escape() function fails to neutralize leading formula characters, allowing authenticated users to inject malicious formul...
CVE-2026-129133 MRBS before 1.13.0 CSV Formula Injection via Report Export
MRBS before 1.13.0 contains a CSV formula injection vulnerability that allows authenticated users to inject spreadsheet formulas because the escape function in web/report.php fails to neutralize leading formula characters. Attackers can store formulas in booking names, descriptions or custom fiel...
EUVD-2026-125546
MRBS before 1.13.0 contains a CSV formula injection vulnerability that allows authenticated users to inject spreadsheet formulas because the escape function in web/report.php fails to neutralize leading formula characters. Attackers can store formulas in booking names, descriptions or custom fiel...
CVE-2026-128348
ExcelJS through 4.4.0 contains a formula injection vulnerability in the totals row formula getter in lib/doc/table.js that fails to escape , , and ' characters in structured reference column names. Attackers can supply column names containing via untrusted input like imported CSV headers to injec...
EUVD-2026-125232
NocoDB before 2026.06.1 contains a CSV formula injection vulnerability in export.service.ts that writes record values and column titles beginning with formula characters into CSV exports without neutralization. Low-privileged collaborators, or unauthenticated users submitting a public form, can...
CVE-2026-126289 NocoDB before 2026.06.1 CSV Formula Injection via export.service.ts
NocoDB before 2026.06.1 contains a CSV formula injection vulnerability in export.service.ts that writes record values and column titles beginning with formula characters into CSV exports without neutralization. Low-privileged collaborators, or unauthenticated users submitting a public form, can...
CVE-2026-126289
NocoDB versions prior to 2026.06.1 are vulnerable to a CSV formula injection in the export.service.ts component. The root cause is the failure to neutralize record values and column titles that begin with formula characters during CSV exports. This allows low-privileged collaborators or unauthent...
CVE-2026-128348 ExcelJS through 4.4.0 Formula Injection via Table Totals Row Column Names
ExcelJS through 4.4.0 contains a formula injection vulnerability in the totals row formula getter in lib/doc/table.js that fails to escape , , and ' characters in structured reference column names. Attackers can supply column names containing via untrusted input like imported CSV headers to injec...
CVE-2026-128348
Versions of ExcelJS through 4.4.0 are vulnerable to a formula injection vulnerability in the totals row formula getter located in lib/doc/table.js. The root cause is the failure to escape characters such as [, ], #, and ' in structured reference column names. An attacker can provide untrusted inp...
EUVD-2026-125151
ExcelJS through 4.4.0 contains a formula injection vulnerability in the totals row formula getter in lib/doc/table.js that fails to escape , , and ' characters in structured reference column names. Attackers can supply column names containing via untrusted input like imported CSV headers to injec...
CVE-2026-128348 ExcelJS through 4.4.0 Formula Injection via Table Totals Row Column Names
ExcelJS through 4.4.0 contains a formula injection vulnerability in the totals row formula getter in lib/doc/table.js that fails to escape , , and ' characters in structured reference column names. Attackers can supply column names containing via untrusted input like imported CSV headers to injec...
PT-2026-146562
ExcelJS through 4.4.0 contains a formula injection vulnerability in the totals row formula getter in lib/doc/table.js that fails to escape , , and ' characters in structured reference column names. Attackers can supply column names containing via untrusted input like imported CSV headers to injec...
PT-2026-146991
MRBS before 1.13.0 contains a CSV formula injection vulnerability that allows authenticated users to inject spreadsheet formulas because the escape function in web/report.php fails to neutralize leading formula characters. Attackers can store formulas in booking names, descriptions or custom fiel...
PT-2026-146620
NocoDB before 2026.06.1 contains a CSV formula injection vulnerability in export.service.ts that writes record values and column titles beginning with formula characters into CSV exports without neutralization. Low-privileged collaborators, or unauthenticated users submitting a public form, can...
CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC
CVE-2025-60852: CSV Injection in Instant Developer Foundation 25.0.9600 ā Proof of Concept PoC š Overview This repository contains a Proof of Concept PoC for a CSV Injection Formula Injection vulnerability CVE-2025-60852 affecting applications built with the Instant Developer Foundation framework...
CVE-2021-46363
CVE-2021-46363: Formula Injection in Magnolia CMS An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported...
cve-2024-43425
CVE-2024-43425 Firmware info: Application name: Moodle Build version: moodle-4.4.1 Affected versions: 4.4 to 4.4.1, 4.3 to 4.3.5, 4.2 to 4.2.8, 4.1 to 4.1.11 and earlier unsupported versions Download link: moodle-4.4.1 Description and Impact Attackers with permission to create or modify questions...
CVE-2026-124018
Gutenverse Form plugin for WordPress before 3.2.2 contains a CSV formula injection vulnerability that allows unauthenticated attackers to inject spreadsheet formula-trigger characters by submitting free-text field values to the public form-submit REST route, which sanitizes input with...
CVE-2026-124018 Gutenverse Form WordPress Plugin < 3.2.2 CSV Formula Injection via Form Submission
Gutenverse Form plugin for WordPress before 3.2.2 contains a CSV formula injection vulnerability that allows unauthenticated attackers to inject spreadsheet formula-trigger characters by submitting free-text field values to the public form-submit REST route, which sanitizes input with...