CVE-2021-46363

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files

published February 11, 2022

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01874 · 79.2th percentile
Published
2022-02-11T20:08Z
EPSS history
Timeline
  • 11 FEB 20:08Z
    An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files
    cvelistv5