Skip to content
OpenAdvisories

Product · scottchiefbaker

dool

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.6

    Formula Injection in dool project

    Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a pr…