CSV Injection

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to CSV Injection in the ReportsController::postAssetAcceptanceReport process. An attacker can inject malicious formula content into free-text fields that appear in the acceptan...