PT-2016-3686
CVE-2015-5349
·
تاريخ النشر
2016-04-11
·
تاريخ التحديث
2022-05-13
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Apache LDAP Studio and Apache Directory Studio versions prior to 2.0.0-M10
Description
The issue concerns the CSV export functionality, which fails to properly escape field values. This could allow attackers to execute arbitrary commands by crafting a specific LDAP entry that is interpreted as a formula when imported into a spreadsheet.
Recommendations
For versions prior to 2.0.0-M10, update to version 2.0.0-M10 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾