2 matches found
MantisBT CSV Injection unprivileged user access in csv_export.php
Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csvexport.php generated CSV file in Excel...
7.8CVSS7AI score0.00979EPSS
SaveExploits1References5Affected Software1
CVE-2021-43257: Improper Neutralization of Formula Elements in a CSV File
Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csvexport.php generated CSV file in Excel...
7.8CVSS7.5AI score0.00979EPSS
SaveExploits1References2
20