PT-2020-10365
CVE-2019-20184
·
تاريخ النشر
2020-01-09
·
تاريخ التحديث
2020-11-17
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
KeePass version 2.4.1
Description
The issue allows CSV injection in the title field of a CSV export.
Recommendations
For version 2.4.1, avoid using the title field in CSV exports until a fix is available. As a temporary workaround, consider manually validating and sanitizing the title field data before exporting to CSV.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾