VulnerabilityModified
CVE-2018-20468
A web reports module has "export to excel features" that are vulnerable to CSV injection.
HIGH 8.8EPSS 2.22%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed Excel formulas inside an automation script that, when exported after execution, results in code execution.
- CVSS 3.0
- 8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 2.22% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-1236
- Affected
- sahipro/sahi pro
- Source
- cve@mitre.org
References
- https://barriersec.com/2019/06/cve-2018-20468-sahi-pro/Exploit, Third Party Advisory
- https://barriersec.com/2019/06/cve-2018-20468-sahi-pro/Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.