Security Advisory

CVE-2017-15879

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-10-24 21:00:00

Last updated 2024-08-05 20:04:50

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export.

← Browse all CVEs View on cve.org ↗