RSS   Podatności dla 'Csv\+'   RSS

2022-02-08
 
CVE-2022-21241

CWE-79
 

 
Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains HTML a tag.

 


Copyright 2024, cxsecurity.com

 

Back to Top