CVEvulnerability
CVE-2018-9113
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-04-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Centers for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial '><script type="text/javascript" src=' line. Fix released on 2018-03-29.
Affected configurations
• cdc microbetrace 0.1.12
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- https://github.com/CDCgov/MicrobeTRACE/releases/tag/v0.1.12 Third Party Advisory
- https://github.com/CDCgov/MicrobeTrace/commit/e60c5fefb1b4740d42d99b634d3d3c4e66290f01 github.com
- https://github.com/wshepherd0010/advisories/blob/master/CVE-2018-9113.md Exploit, Third Party Advisory
- https://github.com/CDCgov/MicrobeTRACE/releases/tag/v0.1.12 Third Party Advisory
- https://github.com/CDCgov/MicrobeTrace/commit/e60c5fefb1b4740d42d99b634d3d3c4e66290f01 github.com
- https://github.com/wshepherd0010/advisories/blob/master/CVE-2018-9113.md Exploit, Third Party Advisory