Lucene search
+L

1 matches found

Veracode
Veracode
added 2021/11/25 8:12 a.m.26 views

CSV Injection

symfony/serializer is vulnerable to CSV Injection. The vulnerability exists in a private variable used in flatten function of CsvEncoder.php as it doesn't properly encode the formulas which allows an attacker to inject arbitrary CSV formulas and code...

6.5CVSS4.2AI score0.01355EPSS
SaveExploits0References11Affected Software2
Rows per page
Query Builder