GitHub Advisoryadvisory · PyPI

GHSA-9hx5-jmxv-x44q CSV Injection in inventree

HIGH Published 2022-06-18 Modified 2022-07-05 Official page ↗

Aliases: CVE-2022-2112
Ecosystem: PyPI
Packages: inventree
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-1236
Reviewed: 2022-07-05

Affected packages

• PyPI inventree: < 0.7.2 → fixed in 0.7.2

Description

Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2.

Related

Alias · CVE (1)

CVE-2022-2112 Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2. vulnerability

Weakness · CWE (1)

CWE-1236 Improper Neutralization of Formula Elements in a CSV File weakness

References