CVE-2018-8092

CRITICAL9.8EPSS 0.49%

CSV Injection vulnerability with exported contact lists in Mautic

Published: 1/19/2021Modified: 11/8/2023

Description

### Impact Mautic versions before 2.13.0 had a vulnerability that allowed a CSV injection with exported contact lists - https://www.owasp.org/index.php/CSV_Injection. ### Patches Update to 2.13.0 or later. ### Workarounds None. ### For more information If you have any questions or comments about this advisory: * Email us at [[email protected]](mailto:[email protected])

Affected packages (1)

Packagist/mautic/corefrom 0, < 2.13.0

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	CRITICAL9.8	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (4)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-8092
WEBhttps://github.com/mautic/mautic/commit/cbc49f0ac4cc7e3acc07f2a85c079b2f85225a6b
WEBhttps://github.com/mautic/mautic/releases/tag/2.13.0
WEBhttps://github.com/mautic/mautic/security/advisories/GHSA-29v9-2fpx-j5g9