Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2021/11/24 9:01 p.m.•115 views

CSV Injection in symfony/serializer

Description ----------- CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. When a spreadsheet program opens a CSV, any cell starting with = is interpreted by the software as a formula and could be abused by an attacker. In Symfony 4.1, we'...

6.5CVSS1.4AI score0.014EPSS
SaveExploits0References13Affected Software2
OSV
OSV
•added 2021/11/24 9:01 p.m.•70 views

GHSA-2XHG-W2G5-W95X CSV Injection in symfony/serializer

Description ----------- CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. When a spreadsheet program opens a CSV, any cell starting with = is interpreted by the software as a formula and could be abused by an attacker. In Symfony 4.1, we'...

6.5CVSS6.1AI score0.014EPSS
SaveExploits0References13
Rows per page
Query Builder