메뉴 건너뛰기

GREATUSER

cve

CVE-2017-18049

관리자 2018.01.25 04:00 조회 수 : 13

In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software (including Microsoft Excel). For example, the CSV data may contain untrusted user input from the "First Name" field of a user's /myprofile page.


원문출처 : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-18049
번호 제목 글쓴이 날짜 조회 수
122 CVE-2018-1000009 관리자 2018.01.25 11
121 CVE-2018-1000010 관리자 2018.01.25 11
120 CVE-2018-1000014 관리자 2018.01.25 11
119 CVE-2017-15094 관리자 2018.01.25 11
118 CVE-2017-9805 관리자 2017.09.16 12
117 CVE-2017-16650 관리자 2017.11.09 12
116 CVE-2017-16618 관리자 2017.11.09 12
115 CVE-2017-16616 관리자 2017.11.09 12
114 CVE-2017-16660 관리자 2017.11.09 12
113 CVE-2017-16659 관리자 2017.11.09 12
112 CVE-2018-6029 관리자 2018.01.25 12
111 CVE-2017-14099 관리자 2017.09.04 13
110 CVE-2017-16661 관리자 2017.11.09 13
109 CVE-2018-1042 관리자 2018.01.25 13
108 CVE-2017-16607 관리자 2018.01.25 13
위로