提交 #631473: elunez eladmin ≤ 2.7 CSV/XLSX Injection(CWE-1236)
| 标题 | elunez eladmin ≤ 2.7 CSV/XLSX Injection(CWE-1236) |
|---|---|
| 描述 | In eladmin versions up to 2.7, 19 endpoints are vulnerable to CSV/XLSX injection, which can lead to sensitive information disclosure when malicious spreadsheet formulas are executed. |
| 来源 | ⚠️ https:/ |
| 用户 | ez-lbz (UID 87033) |
| 提交 | 2025-08-10 10時18分 (1 年前) |
| 管理 | 2025-08-20 13時07分 (10 days later) |
| 状态 | 已接受 |
| VulDB条目 | 320774 [elunez eladmin 直到 2.7 exportUser 权限提升] |
| 积分 | 15 |