CSV injection in Craft CMS

High severity GitHub Reviewed Published Oct 4, 2021 to the GitHub Advisory Database • Updated Jan 9, 2023

Withdrawn This advisory was withdrawn on Oct 18, 2021

Package

craftcms/cms (Composer)

Affected versions

< 3.7.14

Patched versions

3.7.14

Description

Withdrawn

Duplicate of GHSA-h7vq-5qgw-jwwq

References

Reviewed Oct 1, 2021

Published to the GitHub Advisory Database Oct 4, 2021

Withdrawn Oct 18, 2021

Last updated Jan 9, 2023

Severity

High

8.8

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H