CVE-2021-43257

Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to…

published April 14, 2022

CVSS
—
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csv_export.php generated CSV file in Excel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00979 · 61.9th percentile
Published
2022-04-14T19:25Z
EPSS history
Timeline
  • 14 APR 19:25Z
    Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to…
    cvelistv5