PT-2017-10749 · Framasoft · Framadate

Publicado 2017-07-13 · Atualizado 2017-07-19 · CVE-2017-1000039

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Framadate version 1.0

Description The issue concerns Formula Injection in the CSV Export, which could lead to Information Disclosure and Code Execution.

Recommendations For Framadate version 1.0, update to a version that fixes the Formula Injection issue in the CSV Export, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-1000039

Produtos afetados

Framadate

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-1000039 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000039 · Nota de Segurança
• https://framagit.org/framasoft/framadate/issues/220 · Aviso do Fabricante