CVE-2023-2629

Summary

Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.

Affected Software

Weaknesses

• CWE-1236: CWE-1236 Improper Neutralization of Formula Elements in a CSV File

ADP Enrichment

CVE Program Container

Additional References

• https://huntr.dev/bounties/821ff465-4754-42d1-9376-813c17f16a01
• https://github.com/pimcore/customer-data-framework/commit/4e0105c3a78d20686a0c010faef27d2297b98803

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://huntr.dev/bounties/821ff465-4754-42d1-9376-813c17f16a01
• https://github.com/pimcore/customer-data-framework/commit/4e0105c3a78d20686a0c010faef27d2297b98803

• ←Previous
• Next→