CVE-2018-15474

Publicada em 07 set 2018 · Atualizada em 05 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.3%

CSV Injection (aka Excel Macro Injection or Formula Injection) in /lib/plugins/usermanager/admin.php in DokuWiki 2018-04-22a and earlier allows remote attackers to exfiltrate sensitive data and to execute arbitrary code via a value that is mishandled in a CSV export. NOTE: the vendor has stated "this is not a security problem in DokuWiki.

Produtos afetados

n/a · n/a

Referências

https://github.com/splitbrain/dokuwiki/issues/2450 https://seclists.org/fulldisclosure/2018/Sep/4 https://www.patreon.com/posts/unfixed-security-21250652 https://www.sec-consult.com/en/blog/advisories/dokuwiki-csv-formula-injection-vulnerability/