GHSA-pp2h-95hm-hv9rMedium

Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore

Published
August 30, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-37702 →

📋 Description

Impact

Data Object CSV import allows formular injection.

Patches

Problem is patched in 10.1.1

Workarounds

Apply https://github.com/pimcore/pimcore/pull/9992.patch

References

https://cwe.mitre.org/data/definitions/1236.html

🎯 Affected products1

  • composer/pimcore/pimcore:< 10.1.1

🔗 References (4)