52 matches found
CVE-2024-27785
CVE-2024-27785 affects Fortinet FortiAIOps 2.0.0. The flaw is improper neutralization of formula elements in CSV files, allowing a remote authenticated attacker to execute arbitrary commands on a client’s workstation via poisoned CSV reports. Exploitation requires authentication; an attacker can ...
CVE-2022-41616
Improper Neutralization of Formula Elements in a CSV File vulnerability in Kaushik Kalathiya Export Users Data CSV.This issue affects Export Users Data CSV: from n/a through 2.1...
PT-2023-14588 · Solwin Infotech · User Blocker
Name of the Vulnerable Software and Affected Versions: Solwin Infotech User Blocker versions 1.5.5 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the User Blocker software. Recommendations: For versions 1.5.5 and...
PT-2023-14657 · WordPress · Webtoffee Wordpress Comments Import & Export
Name of the Vulnerable Software and Affected Versions: WebToffee WordPress Comments Import & Export versions 2.3.1 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file. This can potentially lead to unintended consequences when importing or...
PT-2023-25837 · Tadiran Telecom · Tadiran Telecom Composit
Name of the Vulnerable Software and Affected Versions: Tadiran Telecom Composit affected versions not specified Description: The issue concerns improper neutralization of formula elements in a CSV file, which is classified as CWE-1236. This could potentially lead to unintended actions or data...
CVE-2023-2629 Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework
Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9...
CVE-2023-2258 Improper Neutralization of Formula Elements in a CSV File in alfio-event/alf.io
Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304...
Fortinet FortiAnalyzer Command Execution Vulnerability
Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...
Input validation
A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0 - 7.2.1 allows local attacker to execute unauthorized code or commands via inserting spreadsheet formulas in macro names...
GHSA-RG8F-5P7X-M6WV MantisBT CSV Injection unprivileged user access in csv_export.php
Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csvexport.php generated CSV file in Excel...
CVE-2018-8974
Centers for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial 'Sourcescript type="text/javascript" src=' line. Fix released on 2018-03-28...