Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/09/14 1:23 p.m.33 views

CVE-2026-73195 Apache Syncope: CSV export spreadsheet formula injection

Improper Encoding or Escaping of Output vulnerability in Apache Syncope. Authenticated users can store a spreadsheet formula payload in one of their own plain attributes. When such users are included in a CSV export and the generated CSV file is opened by a spreadsheet application, the formula ma...

0.00336EPSS
SaveExploits0References1
Rows per page
Query Builder