CVE-2021-38873

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0

Description The issue is related to CSV Injection, where a remote attacker could execute arbitrary commands on the system due to improper validation of csv file contents. This allows for the potential execution of commands, posing a risk to the system's security.

Recommendations For IBM Planning Analytics version 2.0, consider implementing proper validation of csv file contents to prevent arbitrary command execution. As a temporary workaround, restrict the ability to upload or process csv files from untrusted sources until a fix is available.