EDB-43053
PoCKeystoneJS 4.0.0-beta.5 - CSV Excel Macro Injection
view exploit source exploit_dbtype webappsauthor Ishaq Mohammedpublished 2017-10-25catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-15879US | high8.8 | Exploit | ||
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan