CSV Injection

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to CSV Injection via the downloadLocationScopingReport process. An attacker can execute arbitrary spreadsheet formulas in the context of a privileged user's spreadsheet...