Lucene search
+L

4 matches found

OSV
OSV
•added 2017/11/16 1:46 a.m.•42 views

GHSA-6494-V9FQ-FGQ2 Keystone is vulnerable to CSV injection

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

8.8CVSS8.7AI score0.07217EPSS
SaveExploits4References5
OSV
OSV
•added 2017/10/24 9:29 p.m.•17 views

CVE-2017-15879

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

8.8CVSS7AI score
SaveExploits0References3
NVD
NVD
•added 2017/10/24 9:29 p.m.•25 views

CVE-2017-15879

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

8.8CVSS8.8AI score0.07217EPSS
SaveExploits4References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/24 12:00 a.m.•3 views

CVE-2017-15879: Improper Input Validation

CSV Injection aka Excel Macro Injection or Formula Injection exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export...

8.8CVSS7.8AI score0.07217EPSS
SaveExploits4References2
Rows per page
Query Builder