Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2021/11/24 9:1 p.m.80 views

CSV Injection in symfony/serializer

Description ----------- CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. When a spreadsheet program opens a CSV, any cell starting with = is interpreted by the software as a formula and could be abused by an attacker. In Symfony 4.1, we'...

6.5CVSS1.4AI score0.01355EPSS
SaveExploits0References13Affected Software2
OSV
OSV
added 2021/11/24 9:1 p.m.66 views

GHSA-2XHG-W2G5-W95X CSV Injection in symfony/serializer

Description ----------- CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. When a spreadsheet program opens a CSV, any cell starting with = is interpreted by the software as a formula and could be abused by an attacker. In Symfony 4.1, we'...

6.5CVSS6.1AI score0.01355EPSS
SaveExploits0References13
Rows per page
Query Builder