Lucene search
+L

4 matches found

NVD
NVD
added 2021/11/26 8:15 p.m.17 views

CVE-2021-23654

This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV file. Through this a malicious actor can embed or generate a malicious link or execute commands vi...

9.8CVSS0.01205EPSS
Exploits1References2
OSV
OSV
added 2021/11/26 8:15 p.m.12 views

CVE-2021-23654

This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV file. Through this a malicious actor can embed or generate a malicious link or execute commands vi...

9.8CVSS9.5AI score
Exploits0References2
Cvelist
Cvelist
added 2021/11/26 8:5 p.m.23 views

CVE-2021-23654 Improper Input Validation

This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV file. Through this a malicious actor can embed or generate a malicious link or execute commands vi...

5.6CVSS9.8AI score0.01205EPSS
Exploits1References2
CVE
CVE
added 2021/11/26 8:5 p.m.84 views

CVE-2021-23654

The CVE-2021-23654 issue affects all versions of the html-to-csv package. A vulnerability exists where a formula embedded in an HTML page is accepted without validation and is carried over when converting to CSV, enabling a malicious actor to embed or generate a malicious link or execute commands...

9.8CVSS7.5AI score0.01205EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder