CSV Injection

2020-08-0702:30:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

28.6%

JSON

cfme is vulnerable to CSV injection. The orchestration templates allow attackers to inject arbitrary CSV content such as formulas and exfiltrate data or further exploit other vulnerabilities.

CPENameOperatorVersion
cfmeeq5.11.6.0__1.el8cf
cfmeeq5.11.0.28__1.el8cf
cfmeeq5.11.2.2__1.el8cf
cfmeeq5.11.5.2__1.el8cf
cfmeeq5.11.4.2__1.el8cf
cfmeeq5.11.1.2__1.el8cf
cfmeeq5.11.3.1__1.el8cf
cfme-applianceeq5.11.6.0__1.el8cf
cfme-applianceeq5.11.0.28__1.el8cf
cfme-applianceeq5.11.2.2__1.el8cf

Name	Operator	Version
cfme	eq	5.11.6.0__1.el8cf
cfme	eq	5.11.0.28__1.el8cf
cfme	eq	5.11.2.2__1.el8cf
cfme	eq	5.11.5.2__1.el8cf
cfme	eq	5.11.4.2__1.el8cf
cfme	eq	5.11.1.2__1.el8cf
cfme	eq	5.11.3.1__1.el8cf
cfme-appliance	eq	5.11.6.0__1.el8cf
cfme-appliance	eq	5.11.0.28__1.el8cf
cfme-appliance	eq	5.11.2.2__1.el8cf