CVE-2021-41128

Name of the Vulnerable Software and Affected Versions Hygeia versions prior to 1.30.4

Description The issue concerns a CSV Injection Vulnerability in the CSV Exports feature of the Hygeia application, which is used for collecting and processing personal and case data related to communicable diseases. This vulnerability allows users to submit formulas as exported fields, which are then executed when the exported file is ingested. The lack of validation or sanitization of these formula fields enables malicious actors to construct and execute malicious code.

Recommendations For versions prior to 1.30.4, upgrade to version 1.30.4 to resolve the issue.