CWE-1236 Improper Neutralization of Formula Elements in a CSV File
Description
The product saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by a spreadsheet product.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-1236 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-whrx-mmgr-gpcf | CVE-2026-55452 | MODERATE | - |
Snipe-IT has CSV formula injection in Activity Report export |
2026-08-28 |
| GHSA-3h6h-67x3-cv5x | CVE-2026-47693 | MODERATE | - |
Poweradmin: CSV Injection in log export endpoints allows formula execution in spreadsheet applications |
2026-07-20 |
| GHSA-2p5x-4jr6-x5jg | CVE-2026-45263 | HIGH | - |
FacturaScripts: CSV formula injection in CSVExport allows authenticated low-priv users to plant payloads that execute when an admin opens the export |
2026-07-14 |
| GHSA-g27c-q7cp-mhx6 | CVE-2026-9673 | MODERATE |
json-2-csv vulnerable to CSV Injection via the preventCsvInjection optio |
2026-07-01 | |
| GHSA-h77m-qrj7-jxcw | CVE-2026-54243 | MODERATE | - |
Statamic Vulnerable to CSV formula injection in form submission exports |
2026-06-26 |
| GHSA-xqjm-27pc-rvwm | CVE-2026-50179 | MODERATE |
@actual-app/web has CSV Formula Injection in Transaction Export via Imported Payee/Notes Fields |
2026-06-22 | |
| GHSA-7gh7-258j-4mpq | CVE-2026-46672 | MODERATE |
@actual-app/cli `--format csv` Output Vulnerable to CSV Formula Injection via Custom `escapeCsv` Helper |
2026-06-22 | |
| GHSA-4q3w-jgfx-4792 | CVE-2020-36962 | MODERATE |
Tendenci is Vulnerable to CSV Formula Injection through its Contact Form Message Field |
2026-06-09 | |
| GHSA-xf4v-w5x5-pv79 | - | MODERATE |
Spree: CSV Formula Injection in Customer Export |
2026-06-04 | |
| GHSA-3xc2-h5r3-wv3r | CVE-2026-42267 | MODERATE | - |
Kimai vulnerable to formula Injection via tag names in XLSX export |
2026-05-14 |
| GHSA-xq9m-hmp9-fw87 | - | HIGH |
wger: CSV/TSV formula injection in gym member export (first_name/last_name) |
2026-05-06 | |
| GHSA-qfh6-h7j6-fvjv | CVE-2025-67851 | MODERATE | - |
Moodle formula injection vulnerability |
2026-02-03 |
| GHSA-8q4v-35v6-g8wr | CVE-2017-18900 | CRITICAL |
Mattermost Server is vulnerable CSV Injection |
2026-01-12 | |
| GHSA-x2v3-9p22-w3x6 | CVE-2023-53929 | MODERATE | - |
phpMyFAQ contains a CSV injection vulnerability |
2026-01-02 |
| GHSA-jqrp-58fv-w8cq | CVE-2025-62417 | CRITICAL | - |
bagisto has CSV Formula Injection in Create New Product |
2025-10-16 |
| GHSA-74rg-6f92-g6wx | CVE-2025-55745 | LOW | - |
UnoPim has CSV Injection on Quick Export feature |
2025-08-22 |
| GHSA-q693-v7qf-p4xj | CVE-2019-11819 | HIGH |
Alkacon OpenCMS CSV Injection via New User module |
2025-06-19 | |
| GHSA-rg8f-5p7x-m6wv | CVE-2021-43257 | HIGH | - |
MantisBT CSV Injection unprivileged user access in csv_export.php |
2025-05-30 |
| GHSA-2h4w-p9fh-9rmv | CVE-2024-55532 | LOW |
Apache Ranger Improper Neutralization of Formula Elements vulnerability |
2025-03-03 | |
| GHSA-663j-rjcr-789f | CVE-2021-25962 | HIGH |
CSV injection in shuup |
2024-10-23 | |
| GHSA-g2m8-f3x2-qprw | CVE-2024-27320 | HIGH |
Refuel Autolab Eval Injection vulnerability |
2024-09-23 | |
| GHSA-fwf6-rw69-hhj4 | CVE-2021-23654 | MODERATE |
Improper Neutralization of Formula Elements in a CSV File in html-2-csv |
2024-09-20 | |
| GHSA-4fgp-7vvm-m4jf | CVE-2024-27321 | HIGH |
Refuel Autolab Eval Injection vulnerability |
2024-09-20 | |
| GHSA-2xhg-w2g5-w95x | CVE-2021-41270 | MODERATE | - |
CSV Injection in symfony/serializer |
2024-02-05 |
| GHSA-356j-hg45-x525 | CVE-2023-50448 | HIGH |
Potential CSV export data leak |
2024-01-02 |