PT-2023-14157 · Unknown · Shambix Simple Csv/Xls Exporter

Mika · Published 2023-11-07 · Updated 2023-11-15 · CVE-2022-42882

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Shambix Simple CSV/XLS Exporter versions 1.5.8 and earlier

Description The issue is related to the improper neutralization of formula elements in a CSV file. This can potentially lead to unintended consequences when importing or processing the CSV file.

Recommendations For versions 1.5.8 and earlier, update to a version that contains a fix for this issue, if available. If no specific fix is provided for your version, consider reaching out to the software vendor for guidance on mitigation or resolution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-1236

Related Identifiers

CVE-2022-42882

Affected Products

Shambix Simple Csv/Xls Exporter

References · 4

• https://osv.dev/vulnerability/CVE-2022-42882 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42882 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/simple-csv-xls-exporter/vulnerability/wordpress-simple-csv-xls-exporter-plugin-1-5-8-authenticated-csv-injection-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/vulnerability/simple-csv-xls-exporter/wordpress-simple-csv-xls-exporter-plugin-1-5-8-authenticated-csv-injection-vulnerability?_s_id=cve · Note