NetSight
high7.8

CVE-2018-1366

IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection.

Impact

IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection. An attacker could exploit this vulnerability to exploit other vulnerabilities in spreadsheet software. IBM X-Force ID: 137452.

Affected products

VendorProductAffected versions
IbmContent Navigator
Versions 2.0.2.7, 2.0.2.8, 3.0.0, 3.0.1, 3.0.2, 3.0.3

References