CVE-2023-3493
published 2023-06-30CVE-2023-3493: Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3.
PriorityP335high8CVSS 3.1
AVNACLPRLUIRSUCHIHAH
EPSS
0.45%
35.8th percentile
Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fossbilling | fossbilling | < 0.5.3 | 0.5.3 |
| fossbilling | fossbilling_fossbilling | >= unspecified < 0.5.3 | 0.5.3 |
CVSS provenance
nvdv3.18.0HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
nvdv3.07.7HIGHCVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/fossbilling/fossbilling/commit/9402d6c4d44b77ccd68d98d1e6cedf782bd913dchttps://huntr.dev/bounties/e9a272ca-b050-441d-a8cb-4fdecb76cccehttps://github.com/fossbilling/fossbilling/commit/9402d6c4d44b77ccd68d98d1e6cedf782bd913dchttps://huntr.dev/bounties/e9a272ca-b050-441d-a8cb-4fdecb76ccce
2023-06-30
Published