GitHub Advisoryadvisory · Packagist

GHSA-2jvj-mhf2-g99w SilverStripe CSV Excel Macro Injection

MEDIUM Published 2022-05-14 Modified 2024-04-25 Official page ↗
Aliases
CVE-2017-18049
Ecosystem
Packagist
Packages
silverstripe/framework
Severity
Moderate
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-74
Reviewed
2024-04-25

Affected packages

• Packagist silverstripe/framework: < 3.5.6 → fixed in 3.5.6 • Packagist silverstripe/framework: >= 3.6.0, < 3.6.3 → fixed in 3.6.3 • Packagist silverstripe/framework: >= 4.0.0, < 4.0.1 → fixed in 4.0.1

Description

In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software (including Microsoft Excel). For example, the CSV data may contain untrusted user input from the "First Name" field of a user's /myprofile page.

Related

Alias · CVE (1)

  • CVE-2017-18049 In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain… vulnerability

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References