Vulnerabilities > CVE-2020-24707 - Improper Neutralization of Formula Elements in a CSV File vulnerability in Getgophish Gophish

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

critical

NVD

Published: 2020-10-28

Updated: 2020-10-30

Summary

Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.

Part	Description	Count
Application	Getgophish Getgophish Gophish - Getgophish Gophish 0.1 Getgophish Gophish 0.1.1 Getgophish Gophish 0.1.2 Getgophish Gophish 0.2.0 Getgophish Gophish 0.3.0 Getgophish Gophish 0.4.0 Getgophish Gophish 0.5.0 Getgophish Gophish 0.6.0 Getgophish Gophish 0.7.0 Getgophish Gophish 0.7.1 Getgophish Gophish 0.8.0 Getgophish Gophish 0.9.0 Getgophish Gophish 0.10.0 Getgophish Gophish 0.10.1	15