phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet product. Thus, this could lead to CSV Formula Injection.
Metrics
Affected Vendors & Products
References
History
Fri, 20 Dec 2024 21:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 19 Dec 2024 14:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet product. Thus, this could lead to CSV Formula Injection. | |
Title | phpLDAPadmin: Improper Neutralization of Formula Elements | |
Weaknesses | CWE-1236 | |
References |
|
|
Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: NCSC.ch
Published: 2024-12-19T13:41:24.263Z
Updated: 2024-12-20T20:19:26.335Z
Reserved: 2024-09-23T13:40:38.387Z
Link: CVE-2024-9102
Vulnrichment
Updated: 2024-12-20T20:19:21.926Z
NVD
Status : Received
Published: 2024-12-19T14:15:06.327
Modified: 2024-12-19T14:15:06.327
Link: CVE-2024-9102
Redhat
No data.