Lucene search
+L

6 matches found

osv_ghsa
osv_ghsa
•added 2017/11/16 1:46 a.m.•45 views

GHSA-6494-V9FQ-FGQ2 Keystone is vulnerable to CSV injection

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

8.8CVSS8.7AI score0.07217EPSS
SaveExploits4References5
NVD
NVD
•added 2017/10/24 9:29 p.m.•29 views

CVE-2017-15879

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

8.8CVSS8.8AI score0.07217EPSS
SaveExploits4References3
osv_cve
osv_cve
•added 2017/10/24 9:29 p.m.•21 views

CVE-2017-15879

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

8.8CVSS7AI score
SaveExploits0References3
Mend
Mend
•added 2017/10/24 9:00 p.m.•8 views

CVE-2017-15879

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

8.8CVSS0.07217EPSS
SaveExploits4References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/24 12:00 a.m.•6 views

CVE-2017-15879: Improper Input Validation

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

8.8CVSS7.8AI score0.07217EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2017/10/24 12:00 a.m.•5 views

PT-2017-14258

Name of the Vulnerable Software and Affected Versions KeystoneJS versions prior to 4.0.0-beta.7 Description A CSV Injection issue exists due to mishandled values in CSV exports. This issue affects the admin/server/api/download.js and lib/list/getCSVData.js files. Recommendations For versions prio...

8.8CVSS0.07217EPSS
SaveExploits4References7
Rows per page
Query Builder