Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/03 12:00 a.m.•8 views

CVE-2020-5299: Improper Neutralization of Special Elements used in a Command

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, any users with the ability to modify any data that could eventually be exported as a CSV file from the ImportExportController could potentially introduce a CSV injection into the data to cause the generated C...

5.1CVSS5.6AI score0.01002EPSS
SaveExploits2References3
Rows per page
Query Builder