GitHub Advisoryadvisory · Packagist

GHSA-29v9-2fpx-j5g9 CSV Injection vulnerability with exported contact lists in Mautic

MEDIUM Published 2021-01-19 Modified 2021-01-19 Official page ↗
Aliases
CVE-2018-8092
Ecosystem
Packagist
Packages
mautic/core
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1236
Reviewed
2021-01-19

Affected packages

• Packagist mautic/core: < 2.13.0 → fixed in 2.13.0

Description

Impact Mautic versions before 2.13.0 had a vulnerability that allowed a CSV injection with exported contact lists - https://www.owasp.org/index.php/CSV_Injection. Patches Update to 2.13.0 or later. Workarounds None. For more information If you have any questions or comments about this advisory: • Email us at [email protected]

Related

Alias · CVE (1)

  • CVE-2018-8092 Mautic before 2.13.0 allows CSV injection. vulnerability

Weakness · CWE (1)

  • CWE-1236 Improper Neutralization of Formula Elements in a CSV File weakness

References