Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2015/11/20 1:8 p.m.46 views

Shopify: CSV Excel Macro Injection Vulnerability in export list of current users - app.shopify.com

Hi , I have found that when a user tries to Export list of current users who installed his apps through: https://app.shopify.com/services/partners/apiclients//exportinstalledusers the fields of the CSV file are not properly escaped. which makes them vulnerable to CSV Excel Macro Injection...

0.6AI score
SaveExploits0
Rows per page
Query Builder