Lucene search
+L

8 matches found

NVD
NVD
added 2026/08/11 6:17 p.m.13 views

CVE-2026-47705

TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied input when generating CSV files. An attacker can inject spreadsheet formulas into input fields, which are later execute...

9.6CVSS0.00386EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/11 5:16 p.m.5 views

CVE-2026-47705 TypeBot vulnerable to CSV injection in result export

TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied input when generating CSV files. An attacker can inject spreadsheet formulas into input fields, which are later execute...

9.6CVSS5.4AI score0.00386EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/11 5:16 p.m.14 views

CVE-2026-47705 TypeBot vulnerable to CSV injection in result export

TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied input when generating CSV files. An attacker can inject spreadsheet formulas into input fields, which are later execute...

9.6CVSS5.4AI score
SaveExploits0References6
CVE
CVE
added 2026/08/11 5:16 p.m.56 views

CVE-2026-47705

TypeBot (chatbot builder) Version 3.16.1 contains a CSV injection vulnerability in the result export feature. The application does not sanitize or escape user-supplied input when generating CSV files, allowing an attacker to inject spreadsheet formulas into input fields. These formulas are execut...

9.6CVSS5.4AI score0.00386EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/11 5:16 p.m.30 views

CVE-2026-47705 TypeBot vulnerable to CSV injection in result export

TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied input when generating CSV files. An attacker can inject spreadsheet formulas into input fields, which are later execute...

9.6CVSS0.00386EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.8 views

PT-2026-70793

Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.17.0 Description The result export functionality fails to sanitize or escape user-supplied input when generating CSV files. This allows an attacker to inject spreadsheet formulas into input fields. These formulas ar...

9.6CVSS5.4AI score0.00386EPSS
SaveExploits0References6
Fedora
Fedora
added 2020/01/05 12:42 a.m.20 views

[SECURITY] Fedora 31 Update: drupal7-webform-4.21-1.fc31

Webform is the module for making forms and surveys in Drupal. After a submission, users may be sent an e-mail "receipt" as well as sending a notification to administrators. Results can be exported into Excel or other spreadsheet applications. Webform also provides some basic statistical review an...

0.5AI score
SaveExploits0
Fedora
Fedora
added 2015/04/09 9:10 a.m.19 views

[SECURITY] Fedora 21 Update: drupal7-webform-4.7-1.fc21

Webform is the module for making surveys in Drupal. After a submission, users may be sent an e-mail "receipt" as well as sending a notification to administrators. Results can be exported into Excel or other spreadsheet applications. Webform also provides some basic statistical review and has and...

2.8AI score
SaveExploits0
Rows per page
Query Builder