CVE-2019-17661: Critical severity admin columns vulnerability
A CSV injection in the codepress-admin-columns (aka Admin Columns) plugin 3.4.6 for WordPress allows malicious users to gain remote control of other computers. By choosing formula code as his first or last name, an attacker can create a user with a name that contains malicious code. Other users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-17661?
CVE-2019-17661 is considered a medium to high severity vulnerability due to its potential for CSV injection leading to remote code execution.
How do I fix CVE-2019-17661?
To fix CVE-2019-17661, you should update the Admin Columns plugin to the latest version that addresses this vulnerability.
Who is affected by CVE-2019-17661?
Users of the Admin Columns plugin version 3.4.6 for WordPress are at risk of being affected by CVE-2019-17661.
What type of attack is associated with CVE-2019-17661?
CVE-2019-17661 is associated with CSV injection attacks, where an attacker can inject malicious code through user input.
Can CVE-2019-17661 be exploited remotely?
Yes, CVE-2019-17661 can be exploited remotely by attackers to gain control over affected systems.