Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/04/27 11:17 a.m.35 views

Weblate: CSV Injection with the CVS export feature - Glossary

Hi, The "Download as a CSV" feature of Weblate does not properly "escape" fields. Here is more information about this issue: http://www.contextis.com/resources/blog/comma-separated-vulnerabilities/ Here is one method to reproduce this issue: 1 I can add new information in Glossary with a name...

6.9AI score
SaveExploits0
Rows per page
Query Builder