CWE-1236 Improper Neutralization of Formula Elements in a CSV File
baseThe product saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by a spreadsheet product.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (327)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-33256US | high8.8 | — | ||
A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user. The j_username paramete… | ||||
| CVE-2018-11652US | critical9.8 | Exploit | ||
CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly in… | ||||
| CVE-2019-12765US | critical9.8 | Exploit | ||
An issue was discovered in Joomla! before 3.9.7. The CSV export of com_actionslogs is vulnerable to CSV injection. | ||||
| CVE-2018-9035US | critical9.6 | Exploit | ||
CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas i… | ||||
| CVE-2020-10131US | critical9.8 | Exploit | ||
SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter. | ||||
| CVE-2019-13144US | critical9.8 | Exploit | ||
myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is fixed in 1.5. | ||||
| CVE-2019-14749US | high8.8 | Exploit | ||
An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the export spreadsheets functionality. These spreadsheets are gene… | ||||
| CVE-2018-10258US | high8.8 | Exploit | ||
A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV… | ||||
| CVE-2018-10255US | high8.8 | Exploit | ||
A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will be included in the exp… | ||||
| CVE-2018-9107US | high8.8 | Exploit | ||
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandle… | ||||
| CVE-2018-9106US | high8.8 | Exploit | ||
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value that is mishandled in… | ||||
| CVE-2020-25398US | high8.8 | Exploit | ||
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality. | ||||
| CVE-2018-10257US | high8.8 | Exploit | ||
A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be included in the exporte… | ||||
| CVE-2023-33410US | high8.8 | Exploit | ||
Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on t… | ||||
| CVE-2020-9372US | high7.8 | Exploit | ||
The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking form to be any formula, which then coul… | ||||
| CVE-2018-11526US | high7.8 | Exploit | ||
The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection. | ||||
| CVE-2018-11525US | high7.8 | Exploit | ||
The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection. | ||||
| CVE-2018-10504US | high7.8 | Exploit | ||
The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection. | ||||
| CVE-2021-46363US | high7.8 | Exploit | ||
An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary… | ||||
| CVE-2020-9347US | critical9.8 | — | ||
Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the v… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan