Description
Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0.
References (2)
Core 2
Core References
Patch, Third Party Advisory x_refsource_misc
https://github.com/kromitgmbh/titra/commit/e606b674a2b7564407d89e38a341d72e22b14694
Exploit, Third Party Advisory x_refsource_confirm
https://huntr.dev/bounties/fb99c27c-7eaa-48db-be39-b804cb83871d
Scores
CVSS v3
8.0
EPSS
0.0110
EPSS Percentile
61.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-1236
Status
published
Products (1)
kromit/titra
< 0.77.0
Published
Jun 09, 2022
Tracked Since
Feb 18, 2026