Description
Craft CMS before 3.7.14 allows CSV injection.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | craftcms/cms | >= 3.4.0, < 3.7.14 | 3.7.14 | GHSA-h7vq-5qgw-jwwq |
High · 8.8
CVE-2021-41824
EUVD-2021-2209GHSA-h7vq-5qgw-jwwq
CSV Injection Vulnerability
Published Sep 29, 2021 · Updated Aug 4, 2024 · Assigned by mitre