Vulnerabilities > CVE-2020-13247 - Improper Neutralization of Formula Elements in a CSV File vulnerability in Boolebox
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |