Lucene search
+L

3 matches found

OSV
OSV
added 2017/11/16 1:46 a.m.21 views

GHSA-6494-V9FQ-FGQ2 Keystone is vulnerable to CSV injection

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

8.8CVSS8.7AI score0.07217EPSS
SaveExploits4References5
Rows per page
Query Builder