3 matches found
EUVD-2022-33657
Malicious code in bioql PyPI...
9.3CVSS8.6AI score0.01434EPSS
SaveExploits1References1
CVE-2022-29315
Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page, if the Export CSV feature is used...
9.3CVSS7.3AI score0.01434EPSS
SaveExploits1References1
CVE-2020-27358
CVE-2020-27358 affects REDCap 8.11.6 through 9.x before 10. The Messenger CSV export feature is vulnerable to an access-control bypass: non-privileged users can exfiltrate another user’s conversation threads by altering thread_id in the request to Messenger/messenger_download_csv.php?title=Hey&th...
4.3CVSS4.8AI score0.02031EPSS
SaveExploits1References3Affected Software1
20