CVE-2022-26249: Critical severity surveyking vulnerability

Published Mar 24, 2022

Updated

Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack.

Affected Software

1 affected component

Surveyking Project Surveyking=0.3.0

Event History

Mar 24, 2022

CVE Published

via MITRE·09:12 PM

Data Sourced

via MITRE·09:12 PM

Description

Frequently Asked Questions

What is CVE-2022-26249?

CVE-2022-26249 is a vulnerability in Survey King v0.3.0 that allows attackers to execute arbitrary code or access sensitive information via a CSV injection attack when exporting excel files.

What is the severity of CVE-2022-26249?

CVE-2022-26249 has a severity rating of 9.8 (critical).

How does CVE-2022-26249 affect Survey King v0.3.0?

CVE-2022-26249 affects Survey King v0.3.0 by not properly filtering data when exporting excel files, which can be exploited by attackers to execute arbitrary code or access sensitive information.

How can I fix CVE-2022-26249?

To fix CVE-2022-26249, it is recommended to update Survey King to a version that includes the necessary data filtering to prevent CSV injection attacks.

Where can I find more information about CVE-2022-26249?

More information about CVE-2022-26249 can be found at the reference link: https://gitee.com/surveyking/surveyking/issues/I4V05A