3 matches found
GHSA-6494-V9FQ-FGQ2 Keystone is vulnerable to CSV injection
CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...
8.8CVSS8.7AI score0.07217EPSS
SaveExploits4References5
CVE-2017-15879
CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...
8.8CVSS8.8AI score0.07217EPSS
SaveExploits4References3
CVE-2017-15879
CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...
8.8CVSS7AI score
SaveExploits0References3
20