Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/27 12:00 a.m.•5 views

CVE-2019-20002: Improper Neutralization of Formula Elements in a CSV File

Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value provided by a low-privileged user in the Subject field of a help request form that is mishandled in a TicketActions/view?tab=group TSV export by an admin user...

7.8CVSS7.3AI score0.01259EPSS
SaveExploits0References2
Rows per page
Query Builder