GHSA-29v9-2fpx-j5g9MediumCVSS 9.8

CSV Injection vulnerability with exported contact lists in Mautic

Published
January 19, 2021
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2018-8092 →

📋 Description

Impact

Mautic versions before 2.13.0 had a vulnerability that allowed a CSV injection with exported contact lists - https://www.owasp.org/index.php/CSV_Injection.

Patches

Update to 2.13.0 or later.

Workarounds

None.

For more information

If you have any questions or comments about this advisory:

🎯 Affected products1

  • composer/mautic/core:< 2.13.0

🔗 References (5)