high8.8
CVE-2021-41824
Craft CMS before 3.7.14 allows CSV injection.
Impact
Craft CMS before 3.7.14 allows CSV injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Craftcms | Craft Cms | from 3.4.0 before 3.7.14 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28
- https://github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwq
- https://twitter.com/craftcmsupdates/status/1442928690145366018
- https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28
- https://github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwq
- https://twitter.com/craftcmsupdates/status/1442928690145366018