GitHub Advisoryadvisory · Packagist

GHSA-pp2h-95hm-hv9r Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore

MEDIUM Published 2021-08-30 Modified 2021-08-27 Official page ↗

Aliases: CVE-2021-37702
Ecosystem: Packagist
Packages: pimcore/pimcore
Severity: Moderate
Weaknesses: CWE-1236
Reviewed: 2021-08-26

Affected packages

• Packagist pimcore/pimcore: < 10.1.1 → fixed in 10.1.1

Description

Impact Data Object CSV import allows formular injection. Patches Problem is patched in 10.1.1 Workarounds Apply https://github.com/pimcore/pimcore/pull/9992.patch References https://cwe.mitre.org/data/definitions/1236.html

Related

Alias · CVE (1)

CVE-2021-37702 Pimcore is an open source data & experience management platform. vulnerability

Weakness · CWE (1)

CWE-1236 Improper Neutralization of Formula Elements in a CSV File weakness

References