CVE-2022-2027

HIGH

kromitgmbh/titra <0.77.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_confirm
https://huntr.dev/bounties/fb99c27c-7eaa-48db-be39-b804cb83871d

Scores

CVSS v3 8.0
EPSS 0.0110
EPSS Percentile 61.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-1236
Status published
Products (1)
kromit/titra < 0.77.0
Published Jun 09, 2022
Tracked Since Feb 18, 2026