Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2015-5349

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-p9qj-4rjp-j3w9

Apache Directory Studio Command Injection The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet.

gitlab/maven/org.apache.directory.studio/org.apache.directory.studio.ldapbrowser.core/CVE-2015-5349

Improper Neutralization of Special Elements used in a Command ('Command Injection') The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet.

gitlab/maven/org.apache.directory.studio/org.apache.directory.studio.parent/CVE-2015-5349

Improper Neutralization of Special Elements used in a Command ('Command Injection') The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet.