PT-2018-6639 · Silverstripe+1 · Silverstripe+1

Published 2018-01-23 · Updated 2022-05-14 · CVE-2017-18049

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: SilverStripe versions prior to 3.5.6 SilverStripe versions 3.6.x prior to 3.6.3 SilverStripe versions 4.x prior to 4.0.1

Description: The issue concerns the CSV export feature, where the output may contain macros and scripts. These can be executed if the CSV file is imported into common software, such as Microsoft Excel, without proper sanitization. The CSV data may include untrusted user input, for example, from the First Name field of a user's /myprofile page.

Recommendations: For SilverStripe versions prior to 3.5.6, update to version 3.5.6 or later. For SilverStripe versions 3.6.x prior to 3.6.3, update to version 3.6.3 or later. For SilverStripe versions 4.x prior to 4.0.1, update to version 4.0.1 or later.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2017-18049

GHSA-2JVJ-MHF2-G99W

Affected Products

Office Excel

Silverstripe

References · 6

• 🔥 https://exploit-db.com/exploits/43396 · Exploit
• https://osv.dev/vulnerability/GHSA-2jvj-mhf2-g99w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-18049 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18049 · Security Note
• https://silverstripe.org/download/security-releases/ss-2017-007 · Vendor Advisory
• https://github.com/silverstripe/silverstripe-framework · Note