NetSight
high8.8

CVE-2022-2112

CSV Injection in inventree

Impact

Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2.

Affected packages

EcosystemPackageAffectedFixed in
pipinventree< 0.7.20.7.2

Affected products

VendorProductAffected versions
Inventree ProjectInventree
before 0.7.2

Weakness classification

References