1 matches found
CVE-2020-5299: Improper Neutralization of Special Elements used in a Command
In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, any users with the ability to modify any data that could eventually be exported as a CSV file from the ImportExportController could potentially introduce a CSV injection into the data to cause the generated C...
5.1CVSS5.6AI score0.01002EPSS
SaveExploits2References3
20