CVE-2021-43515 | BDVDB-2026-173451 Detail

Description#

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai. By filling the Description field with malicious payload, it will be mistreated while exporting to a CSV file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/kevinpapst/kimai2/commit/dad1b8b772947f1596175add1b4f33b791705507#diff-6774f5865dbaf8bc6c55b75bd92e6f9950ebe7834aa2efd828a19fd637e667cf

Exploit#

No public exploit known

History#

Version 12022-04-08Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.