CVE-2022-37786

CVSS 6.3 MEDIUMEPSS 0.5%CWE-1236

An issue was discovered in WeCube Platform 3.2.2. There are multiple CSV injection issues: the [Home / Admin / Resources] page, the [Home / Admin / System Params] page, and the [Home / Design / Basekey Configuration] page.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/WeBankPartners/wecube-platform https://github.com/WeBankPartners/wecube-platform/issues/2327