THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2019-14352

Assigner:mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca)
Reserved:2019-07-28
Published:2019-07-28
Updated:2024-06-11

Description

In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm_community/crm_userview_sales/_/account_new with the Account ID or Account Name field. NOTE: the vendor disputes the relevance of this finding because CSV is not the intended export format for spreadsheet applications

References

https://github.com/jogetworkflow/jw-community/issues/20

cve.org CVE-2019-14352

nvd.nist.gov CVE-2019-14352

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2019-14352