In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interpret as a command, leading to execution of a malicious string locally on a device, aka CSV injection.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-11-03T10:11:45
Updated: 2024-08-04T02:51:07.439Z
Reserved: 2021-09-10T00:00:00
Link: CVE-2021-40848
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-11-03T11:15:08.267
Modified: 2024-11-21T06:24:55.213
Link: CVE-2021-40848
Redhat
No data.