Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32341
HistoryOct 01, 2021 - 7:35 a.m.

CSV Injection

2021-10-0107:35:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.002 Low

EPSS

Percentile

64.9%

craftcms/cms is vulnerable to CSV injection. Lack of some sanity/escaping check prior to inserting the data to the CSV document allows an attacker to inject malicious input.

CPENameOperatorVersion
craftcms/cmsle3.7.13
craftcms/cmsle3.7.13

0.002 Low

EPSS

Percentile

64.9%

Related for VERACODE:32341