CVE-2018-20468

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0

published June 17, 2019

CVSS
—
EPSS
2%
Percentile
82.6
In the wild
Unconfirmed
What it is

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed Excel formulas inside an automation script that, when exported after execution, results in code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02223 · 82.6th percentile
Published
2019-06-17T13:35Z
EPSS history
Timeline
  • 17 JUN 13:35Z
    An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0
    cvelistv5