Open Audit CVE-2018-9137

MEDIUM

Improper Neutralization of Formula Elements in a CSV File (CWE-1236)

2018-04-19 cve@mitre.org

Code Injection Open Audit

6.8

CVSS 3.0 · NVD

Share

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

1

CVE Published

Apr 19, 2018 - 08:29 nvd

MEDIUM 6.8

DescriptionNVD

Open-AudIT before 2.2 has CSV Injection.

AnalysisAI

Open-AudIT before 2.2 has CSV Injection. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-1236. Affected products include: Open-Audit. Version information: before 2.2.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Open Audit

View all

CVE-2020-11942 CRITICAL Act Now POC

An issue was discovered in Open-AudIT 3.2.2. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploita

CVE-2020-11943 HIGH This Week POC

An issue was discovered in Open-AudIT 3.2.2. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable,

CVE-2020-12078 HIGH This Week POC

An issue was discovered in Open-AudIT 3.3.1. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable,

CVE-2020-11941 HIGH This Week POC

An issue was discovered in Open-AudIT 3.2.2. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable,

CVE-2020-8813 HIGH This Week POC

graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a

CVE-2019-16293 HIGH This Week POC

The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS comma

CVE-2018-8979 HIGH This Week POC

Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the cre

CVE-2021-44916 MEDIUM This Month POC

Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. Rated me

CVE-2018-14493 MEDIUM This Month POC

Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inj

CVE-2018-8937 MEDIUM This Month POC

An issue was discovered in Open-AudIT Professional 2.1. Rated medium severity (CVSS 6.1), this vulnerability is remotely

CVE-2021-40612 CRITICAL Act Now

An issue was discovered in Opmantek Open-AudIT after 3.5.0. Rated critical severity (CVSS 9.8), this vulnerability is re

CVE-2020-12261 MEDIUM This Month POC

Open-AudIT 3.3.0 allows an XSS attack after login. Rated medium severity (CVSS 5.4), this vulnerability is remotely expl

Same weakness CWE-1236 – Improper Neutralization of Formula Elements in a CSV File

View all

CVE-2019-14749 HIGH POC

CVE-2020-36962 CRITICAL POC

CVE-2023-46401 CRITICAL POC

CVE-2025-56267 CRITICAL POC

CVE-2021-47901 CRITICAL POC

CVE-2020-36941 CRITICAL POC

CVE-2022-3574 CRITICAL POC

CVE-2022-3463 CRITICAL POC

Same technique Code Injection

View all

CVE-2012-0158 HIGH POC

CVE-2014-6287 CRITICAL POC

CVE-2017-7494 CRITICAL POC

CVE-2025-24893 CRITICAL POC

CVE-2025-47812 CRITICAL POC

CVE-2013-3906 HIGH POC

CVE-2017-9822 HIGH POC

CVE-2018-1273 CRITICAL POC

Share

CVE-2018-9137 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy