CVE-2022-29315

Name of the Vulnerable Software and Affected Versions Invicti Acunetix versions prior to 14

Description The issue allows CSV injection via the Description field on the Add Targets page, specifically when the Export CSV feature is used. This can occur when using the /api endpoint for target management, although the exact endpoint is not specified. The Description field is vulnerable to injection, potentially allowing malicious data to be inserted into CSV exports.

Recommendations For Invicti Acunetix versions prior to 14, update to version 14 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the Export CSV feature until the update is applied. Additionally, restrict access to the Add Targets page and the Description field to minimize the risk of exploitation.