Description (CNA)
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program (like Excel). This issue affects: Secomea GateManager all versions prior to 9.3.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Secomea / GateManager | affected all before 9.3 |
CWE
CWE-116
References
- https://www.secomea.com/support/cybersecurity-advisory/
- https://www.secomea.com/support/cybersecurity-advisory/#2418
ADP enrichment
No English description supplied.