CWE-1236 · Improper Neutralization of Formula Elements in a CSV File (page 3)
Page 3 of 4 — CVEs classified under CWE-1236, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24016 | Low | 3.7 | 2021-09-30 | An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbit… |
CVE-2021-41824 | High | 8.8 | 2021-09-30 | Craft CMS before 3.7.14 allows CSV injection. |
CVE-2021-25962 | High | 8.0 | 2021-09-29 | “Shuup” application in versions 0.4.2 to 2.10.8 is affected by the “Formula Injection” vulnerability. A customer can inject payloads in the name input field in… |
CVE-2021-25960 | High | 8.0 | 2021-09-29 | In “SuiteCRM” application, v7.11.18 through v7.11.19 and v7.10.29 through v7.10.31 are affected by “CSV Injection” vulnerability (Formula Injection). A low pri… |
CVE-2021-27020 | High | 8.8 | 2021-08-30 | Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export. |
CVE-2021-37702 | High | 8.0 | 2021-08-18 | Pimcore is an open source data & experience management platform. Prior to version 10.1.1, Data Object CSV import allows formular injection. The problem is patc… |
CVE-2021-33256 | High | 8.8 | 2021-08-09 | A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user. Th… |
CVE-2021-22771 | High | 7.3 | 2021-07-21 | A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2.7.1 and older that would allow arbi… |
CVE-2020-25445 | High | 7.8 | 2021-07-14 | The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input containing the excel formula is not bei… |
CVE-2021-24441 | High | 8.0 | 2021-07-12 | The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CS… |
CVE-2020-22390 | High | 8.8 | 2021-06-21 | Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perf… |
CVE-2021-22153 | High | 7.3 | 2021-05-13 | A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier cou… |
CVE-2021-29667 | High | 7.8 | 2021-04-27 | IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary comman… |
CVE-2021-1475 | Medium | 6.5 | 2021-04-08 | Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to… |
CVE-2021-1474 | Medium | 6.5 | 2021-04-08 | Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to… |
CVE-2021-24144 | High | 7.8 | 2021-03-18 | Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrar… |
CVE-2021-27839 | Medium | 4.4 | 2021-03-03 | A CSV injection vulnerability found in Online Invoicing System (OIS) 4.3 and below can be exploited by users to perform malicious actions such as redirecting a… |
CVE-2021-21302 | Medium | 6.8 | 2021-02-26 | PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using sho… |
CVE-2020-9205 | Medium | 4.9 | 2021-02-06 | There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerability through some operations to inject… |
CVE-2021-3188 | Critical | 9.8 | 2021-01-26 | phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports. |
CVE-2020-9200 | High | 7.8 | 2020-12-24 | There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through… |
CVE-2019-16959 | Medium | 6.5 | 2020-12-21 | SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket. |
CVE-2020-28861 | Medium | 5.3 | 2020-12-14 | OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated atta… |
CVE-2020-4633 | High | 8.8 | 2020-12-11 | IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation. |
CVE-2020-4627 | Critical | 9.0 | 2020-11-30 | IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by i… |
CVE-2020-28845 | High | 7.8 | 2020-11-20 | A CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated user to inject malicious payload in admin's portal thus leads to… |
CVE-2020-15301 | High | 7.8 | 2020-11-18 | SuiteCRM through 7.11.13 allows CSV Injection via registration fields in the Accounts, Contacts, Opportunities, and Leads modules. These fields are mishandled… |
CVE-2020-4759 | High | 7.8 | 2020-11-09 | IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, cause… |
CVE-2020-25170 | High | 7.8 | 2020-11-06 | An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are m… |
CVE-2020-26507 | High | 7.8 | 2020-11-05 | A CSV Injection (also known as Formula Injection) vulnerability in the Marmind web application with version 4.1.141.0 allows malicious users to gain remote con… |
CVE-2020-25398 | High | 8.8 | 2020-11-05 | CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality. |
CVE-2020-22274 | Critical | 9.8 | 2020-11-04 | JomSocial (Joomla Social Network Extention) 4.7.6 allows CSV injection via a customer's profile. |
CVE-2020-22278 | High | 8.8 | 2020-11-04 | phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the dat… |
CVE-2020-22277 | High | 8.0 | 2020-11-04 | Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile. |
CVE-2020-22276 | Critical | 9.8 | 2020-11-04 | WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry. |
CVE-2020-22275 | High | 8.8 | 2020-11-04 | Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system admini… |
CVE-2020-24707 | High | 7.8 | 2020-10-28 | Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content. |
CVE-2020-15255 | High | 8.7 | 2020-10-16 | In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as form… |
CVE-2020-4689 | Medium | 6.8 | 2020-10-12 | IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, caused by improper vali… |
CVE-2020-4302 | High | 7.8 | 2020-10-12 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to… |
CVE-2020-14026 | High | 8.8 | 2020-09-22 | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17.6 via a value that… |
CVE-2020-16214 | Medium | 5.0 | 2020-09-11 | In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value (CSV) file, but… |
CVE-2020-13826 | High | 8.8 | 2020-08-20 | A CSV injection (aka Excel Macro Injection or Formula Injection) issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter… |
CVE-2020-10780 | Medium | 6.3 | 2020-08-11 | Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as CSV and opens the file with Excel. Once… |
CVE-2020-7049 | High | 7.3 | 2020-06-30 | Nozomi Networks OS before 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection. |
CVE-2020-13247 | High | 7.3 | 2020-06-24 | BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the… |
CVE-2020-13146 | High | 8.8 | 2020-05-18 | Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course>Instructor>Cohorts may contain a formula that is exported via the "Cours… |
CVE-2019-20002 | High | 7.8 | 2020-04-27 | Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help r… |
CVE-2020-11548 | Critical | 9.8 | 2020-04-05 | The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code e… |
CVE-2020-7947 | Critical | 9.8 | 2020-04-01 | An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. It has numerous fields that can contain data that is pulled from different sou… |
CVE-2019-19676 | Critical | 9.6 | 2020-03-18 | A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kund… |
CVE-2020-9347 | Critical | 9.8 | 2020-03-16 | Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords… |
CVE-2020-10460 | Medium | 4.9 | 2020-03-12 | admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted input inside CSV fi… |
CVE-2020-9372 | High | 7.8 | 2020-03-04 | The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking form to be any for… |
CVE-2020-9466 | Medium | 6.1 | 2020-02-28 | The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection. |
CVE-2020-9017 | High | 8.0 | 2020-02-25 | LiteCart through 2.2.1 allows CSV injection via a customer's profile. |
CVE-2019-20184 | High | 7.8 | 2020-01-09 | KeePass 2.4.1 allows CSV injection in the title field of a CSV export. |
CVE-2019-20180 | Medium | 6.8 | 2020-01-09 | The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor disputes this issue and argues that this resp… |
CVE-2019-13181 | Medium | 6.5 | 2019-12-16 | A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7. |
CVE-2019-0403 | Critical | 9.8 | 2019-12-11 | SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Inject… |
CVE-2019-4521 | Critical | 9.8 | 2019-12-10 | Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the syste… |
CVE-2019-6187 | Medium | 6.5 | 2019-11-20 | A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned us… |
CVE-2019-17661 | High | 8.8 | 2019-11-08 | A CSV injection in the codepress-admin-columns (aka Admin Columns) plugin 3.4.6 for WordPress allows malicious users to gain remote control of other computers… |
CVE-2019-11275 | Medium | 4.3 | 2019-10-01 | Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior… |
CVE-2019-16184 | Critical | 9.8 | 2019-09-09 | A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be… |
CVE-2019-16120 | High | 8.8 | 2019-09-08 | CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees featur… |
CVE-2019-6182 | Medium | 4.9 | 2019-09-03 | A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to st… |
CVE-2019-15092 | High | 7.3 | 2019-08-23 | The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name… |
CVE-2018-19855 | Medium | 5.5 | 2019-08-08 | UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features. |
CVE-2019-14749 | High | 8.8 | 2019-08-07 | An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the export spreadsheets functionality. These… |
CVE-2019-14352 | High | 7.8 | 2019-07-28 | In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm_community/crm_userview_sales/_/account… |
CVE-2019-13144 | Critical | 9.8 | 2019-07-05 | myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is fixed in 1.5. |
CVE-2019-12961 | High | 8.8 | 2019-06-25 | LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function. |
CVE-2019-4364 | High | 8.0 | 2019-06-19 | IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to execute arbirary commands on the system. I… |
CVE-2018-20468 | High | 8.8 | 2019-06-17 | An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An… |
CVE-2019-12765 | Critical | 9.8 | 2019-06-11 | An issue was discovered in Joomla! before 3.9.7. The CSV export of com_actionslogs is vulnerable to CSV injection. |
CVE-2019-12134 | High | 8.8 | 2019-06-06 | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in Workday through 32 via a value (provided by a low-privileged use… |
CVE-2019-11872 | High | 8.8 | 2019-05-29 | The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it allows for injecting malicious code into a pop-up window. Succ… |
CVE-2018-7201 | High | 8.8 | 2019-05-22 | CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel. |
CVE-2019-4071 | High | 8.8 | 2019-05-09 | IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands… |
CVE-2019-11819 | High | 7.8 | 2019-05-08 | Alkacon OpenCMS v10.5.4 and before is affected by CSV (aka Excel Macro) Injection in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp… |
CVE-2018-12244 | Medium | 6.3 | 2019-04-25 | SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerab… |
CVE-2018-20752 | Critical | 9.8 | 2019-02-04 | An issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv.py file allows CSV injection. More specifically, when a Twitt… |
CVE-2018-1774 | High | 8.9 | 2018-11-09 | IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the developer portal and analytics that could contain malicious comman… |
CVE-2018-15474 | Critical | 9.6 | 2018-09-07 | CSV Injection (aka Excel Macro Injection or Formula Injection) in /lib/plugins/usermanager/admin.php in DokuWiki 2018-04-22a and earlier allows remote attacker… |
CVE-2018-16651 | High | 7.2 | 2018-09-07 | The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports. |
CVE-2018-16308 | High | 8.6 | 2018-09-01 | The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection. |
CVE-2018-16275 | High | 7.8 | 2018-08-31 | OPSWAT MetaDefender before v4.11.2 allows CSV injection. |
CVE-2018-15571 | High | 8.6 | 2018-08-28 | The Export Users to CSV plugin through 1.1.1 for WordPress allows CSV injection. |
CVE-2018-11526 | High | 7.8 | 2018-06-19 | The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection. |
CVE-2018-11525 | High | 7.8 | 2018-06-19 | The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection. |
CVE-2018-11652 | Critical | 9.8 | 2018-06-01 | CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header… |
CVE-2018-10258 | High | 8.8 | 2018-05-01 | A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to inject a command that will be included… |
CVE-2018-10257 | High | 8.8 | 2018-05-01 | A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be in… |
CVE-2018-10255 | High | 8.8 | 2018-05-01 | A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will b… |
CVE-2018-10504 | High | 7.8 | 2018-04-27 | The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection. |
CVE-2018-9137 | Medium | 6.8 | 2018-04-19 | Open-AudIT before 2.2 has CSV Injection. |
CVE-2018-8092 | Critical | 9.8 | 2018-04-18 | Mautic before 2.13.0 allows CSV injection. |
CVE-2018-9035 | Critical | 9.6 | 2018-04-04 | CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject s… |
CVE-2018-9107 | High | 8.8 | 2018-03-28 | CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a va… |