CVE-2020-28848 | Severity.io

Description

CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file.

Related CPE's

Vulnerable

References

ExploitIssue Tracking

ExploitIssue Tracking

Weaknesses

Primary

CWE-74

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 · High

Information

Source identifier

Vulnerability status

Modified

Published

2023-08-11T12:15:11.170Z

2 years ago

Last modified

2024-11-21T04:23:11.420Z

1 year ago