Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-37702

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-pp2h-95hm-hv9r

Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore ### Impact Data Object CSV import allows formular injection. ### Patches Problem is patched in 10.1.1 ### Workarounds Apply https://github.com/pimcore/pimcore/pull/9992.patch ### References https://cwe.mitre.org/data/definitions/1236.html

gitlab/packagist/pimcore/pimcore/CVE-2021-37702

Improper Neutralization of Formula Elements in a CSV File Pimcore is an open source data & experience management platform., Data Object CSV import allows formular injection. The problem is patched Aside from upgrading, one may apply the patch manually as a workaround.