Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software (including Microsoft Excel). For example, the CSV data may contain untrusted user input from the "First Name" field of a user's /myprofile page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SilverStripe 安全漏洞
Vulnerability Description
SilverStripe是新西兰SilverStripe公司的一套开源的编程框架和内容管理系统 (CMS)。该系统具有支持多国语言、跨平台等特点。 SilverStripe 3.5.6之前的版本、3.6.3之前的3.6.x版本和4.0.1之前的4.x版本中的CSV导出功能存在安全漏洞。攻击者可利用该漏洞执行宏和脚本。
CVSS Information
N/A
Vulnerability Type
N/A