GHSA-pp2h-95hm-hv9r
Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | pimcore/pimcore | < 10.1.1 | 10.1.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Data Object CSV import allows formular injection.
### Patches
Problem is patched in 10.1.1
### Workarounds
Apply https://github.com/pimcore/pimcore/pull/9992.patch
### References
https://cwe.mitre.org/data/definitions/1236.html
References
External links from the advisory. They lead to third-party sites.