Security Advisory

CVE-2018-20468

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-06-17 13:35:05

Last updated 2024-08-05 12:05:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed Excel formulas inside an automation script that, when exported after execution, results in code execution.

← Browse all CVEs View on cve.org ↗