CVE-2018-9107: High severity Acyba Acymailing Joomla\! vulnerability
Published Mar 28, 2018
·Updated
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export.
Affected Software
1 affected component
Acyba Acymailing Joomla\!<=5.9.5
Event History
Mar 28, 2018
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Data Sourced
via NVD·04:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9107?
CVE-2018-9107 is considered a medium severity vulnerability due to its potential for exploitation through CSV injection.
2
How do I fix CVE-2018-9107?
To fix CVE-2018-9107, you should upgrade the Acyba AcyMailing extension to version 5.9.6 or later.
3
What are the potential consequences of exploiting CVE-2018-9107?
Exploiting CVE-2018-9107 could allow an attacker to execute unauthorized commands when a malicious CSV file is opened in spreadsheet software.
4
Which versions of AcyMailing are affected by CVE-2018-9107?
CVE-2018-9107 affects AcyMailing versions prior to 5.9.6.
5
Is CVE-2018-9107 specific to any platform?
Yes, CVE-2018-9107 specifically affects the AcyMailing extension used within the Joomla! platform.