Threats tagged 'ghsa-qhg3-x2wc-w8x2'

1 threat

Threats tagged 'ghsa-qhg3-x2wc-w8x2'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.3	EPSS 0.2%	CVE-2026-108579openpanel · Improper Neutralization of Formula Elements in a CSV File Low2.3EPSS 0.2%2026-10-10CVE Database V5CVE-2026-108579 OpenPanel versions up to 2.3.0 have a CSV formula injection vulnerability. This flaw allows unauthenticated attackers to inject spreadsheet formulas via crafted profile IDs sent to the /track endpoint. When cohort data is exported to CSV, these formulas can execute, potentially exfiltrating adjacent cell data. The vulnerability has a low CVSS score of 2.3 and does not require privileges to exploit. EPSS 0.2%Vulnerability Openpanel-dev #ghsa-qhg3-x2wc-w8x2	CVE Database V5	2026-10-10

Showing 1–1 of 1 result