Design/Logic Flaw

Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value provided by a low-privileged user in the Subject field of a help request form that is mishandled in a TicketActions/view?tab=group TSV export by an admin user...

CVE-2019-20002: Improper Neutralization of Formula Elements in a CSV File

Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value provided by a low-privileged user in the Subject field of a help request form that is mishandled in a TicketActions/view?tab=group TSV export by an admin user...

PT-2020-10315

Name of the Vulnerable Software and Affected Versions SolarWinds WebHelpDesk version 12.7.1 Description The issue exists in the export feature of SolarWinds WebHelpDesk, where a low-privileged user can inject a formula via the Subject field of a help request form. This formula is then mishandled...