CVE-2023-3302
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
In the GitHub repository admidio/admidio prior to version 4.2.9, there is improper neutralization of formula elements in a CSV file.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious formulas, potentially leading to unauthorized data access or manipulation.
Recommendation
It is recommended to upgrade to version 4.2.9 or later to mitigate this vulnerability.
Other vulnerabilities in admidio/admidio
See all- CVE-2023-4190Medium
Insufficient session expiration in the GitHub repository admidio/admidio prior to version 4.2.11 may lead to unauthorized access.
- CVE-2023-3692High
In the GitHub repository admidio/admidio prior to version 4.2.10, there is a vulnerability allowing unrestricted upload of files with dangerous types.
- CVE-2023-3303Low
Improper access control exists in the GitHub repository admidio/admidio prior to version 4.2.9.
Original NVD description (English source)
Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9.