Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Cloud Pak for Automation CSV injection
Vulnerability Description
IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 259354.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
CWE-1236
Vulnerability Title
IBM Cloud Pak for Automation 安全漏洞
Vulnerability Description
IBM Cloud Pak for Automation是美国国际商业机器（IBM）公司的一个应用于云环境中用于构建自动化应用的智能软件平台。该平台使用预先集成的自动化技术和低代码工具，在任何云上设计、构建和运行自动化应用与服务。 IBM Cloud Pak for Business Automation存在安全漏洞，该漏洞源于CSV文件内容验证不当，容易受到CSV注入攻击，远程攻击者可以在系统上执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A