PT-2017-10749 · Framasoft · Framadate

Published 2017-07-13 · Updated 2017-07-19 · CVE-2017-1000039

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Framadate version 1.0

Description The issue concerns Formula Injection in the CSV Export, which could lead to Information Disclosure and Code Execution.

Recommendations For Framadate version 1.0, update to a version that fixes the Formula Injection issue in the CSV Export, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-1000039

Affected Products

Framadate

References · 3

• https://osv.dev/vulnerability/CVE-2017-1000039 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000039 · Security Note
• https://framagit.org/framasoft/framadate/issues/220 · Vendor Advisory