| Titolo | elunez eladmin ≤ 2.7 CSV/XLSX Injection(CWE-1236) |
|---|
| Descrizione | In eladmin versions up to 2.7, 19 endpoints are vulnerable to CSV/XLSX injection, which can lead to sensitive information disclosure when malicious spreadsheet formulas are executed. |
|---|
| Fonte | ⚠️ https://github.com/elunez/eladmin/issues/886 |
|---|
| Utente | ez-lbz (UID 87033) |
|---|
| Sottomissione | 10/08/2025 10:18 (12 mesi fa) |
|---|
| Moderazione | 20/08/2025 13:07 (10 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 320774 [elunez eladmin fino a 2.7 exportUser escalationi di privilegi] |
|---|
| Punti | 15 |
|---|