CVE-2021-22771

HIGH Year: 2021
CVSS v3 Score
7.3
High
CVSS v2 Score
6.0
Medium
Weakness Type
CWE-1236
View all →

Vulnerability Description

A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2.7.1 and older that would allow arbitrary command execution.

Related Vulnerabilities

CVE-2019-15092

HIGH
CVSS:7.3(High)

The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name columns in an exported CS...

CWE-12362019

CVE-2020-13247

HIGH
CVSS:7.3(High)

BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area.

CWE-12362020

CVE-2020-7049

HIGH
CVSS:7.3(High)

Nozomi Networks OS before 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection.

CWE-12362020

CVE-2021-22153

HIGH
CVSS:7.3(High)

A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause...

CWE-12362021

CVE-2023-25611

HIGH
CVSS:7.3(High)

A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0 - 7.2.1 allows local attacker to execute unauthorized code o...

CWE-12362023

CVE-2018-16651

HIGH
CVSS:7.2(High)

The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports.

CWE-12362018