1. Home
  2. CVE Database
  3. CVE-2018-7201
HIGH · 8.8

CVE-2018-7201

CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel.

Vulnerability Description

CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ProjectsendProjectsend< 1053

Related Weaknesses (CWE)

CWE-1236

References

FAQ

What is CVE-2018-7201?

CVE-2018-7201 is a vulnerability with a CVSS score of 8.8 (HIGH). CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel.

How severe is CVE-2018-7201?

CVE-2018-7201 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7201?

Check the references section above for vendor advisories and patch information. Affected products include: Projectsend Projectsend.