CVE-2024-28111: falha de média gravidade em thinkst canarytokens
CSV Injection in exported history CSV files
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.6%
Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-based Canarytoken to target the Canarytoken's owner, if the owner exports the incident history to CSV and opens in a reader application such as Microsoft Excel. The impact is that this issue could lead to code execution on the machine on which the CSV file is opened. Version sha-c595a1f8 contains a fix for this issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
thinkst · canarytokensCVEs relacionadas — thinkst canarytokens
No mesmo produto, das mais perigosas para as menos.
CVE-2022-31113MEDIUMCross-Site Scripting in Canarytoken historyEPSS 0.6%CVE-2023-22475MEDIUMCross-Site Scripting in Canarytoken historyEPSS 0.6%CVE-2026-28355LOW"PWA" Canarytoken Vulnerable to Stored Self Cross-Site ScriptingEPSS 0.4%CVE-2024-41664MEDIUMBlind SSRF via Canarytoken WebhookEPSS 0.4%CVE-2024-41663LOWCanarytoken "Cloned Website" Vulnerable to Stored Cross-Site ScriptingEPSS 0.3%