CVE-2015-5349

The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute…

published April 11, 2016

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02109 · 81.5th percentile
Published
2016-04-11T21:00Z
EPSS history
Timeline
  • 11 APR 21:00Z
    The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute…
    cvelistv5