CVE-2019-14352

In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by…

published July 28, 2019

CVSS
—
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm_community/crm_userview_sales/_/account_new with the Account ID or Account Name field. NOTE: the vendor disputes the relevance of this finding because CSV is not the intended export format for spreadsheet applications

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00969 · 61.5th percentile
Published
2019-07-28T16:40Z
EPSS history
Timeline
  • 28 JUL 16:40Z
    In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by…
    cvelistv5