1 matches found
CSV Injection
symfony/serializer is vulnerable to CSV Injection. The vulnerability exists in a private variable used in flatten function of CsvEncoder.php as it doesn't properly encode the formulas which allows an attacker to inject arbitrary CSV formulas and code...
6.5CVSS4.2AI score0.01355EPSS
SaveExploits0References11Affected Software2
20