1. Home
  2. CVE Database
  3. CVE-2021-43515
HIGH · 7.8

CVE-2021-43515

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai. By filling the Description field with malicious payload, it will be mistreated while exporting...

Vulnerability Description

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai. By filling the Description field with malicious payload, it will be mistreated while exporting to a CSV file.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
KimaiKimai< 1.14.1

Related Weaknesses (CWE)

CWE-1236

References

FAQ

What is CVE-2021-43515?

CVE-2021-43515 is a vulnerability with a CVSS score of 7.8 (HIGH). CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai. By filling the Description field with malicious payload, it will be mistreated while exporting...

How severe is CVE-2021-43515?

CVE-2021-43515 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-43515?

Check the references section above for vendor advisories and patch information. Affected products include: Kimai Kimai.