PT-2020-16076

CVE-2020-25398

·

Published

2020-11-05

·

Updated

2020-11-12

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions InterMind iMind Server versions through 3.13.65
Description The issue exists in the csv export functionality, allowing for CSV Injection.
Recommendations For versions through 3.13.65, update to a version that contains a fix for this issue, as using the csv export functionality can lead to CSV Injection.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-1236: Improper Neutralization of Formula Elements in a CSV File
Related identifiers
CVE-2020-25398
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com