cisco-sa-umbrella-inject-gbZGHP5T: Cisco Umbrella Link and CSV Formula Injection Vulnerabilities
Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-inject-gbZGHP5T
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-umbrella-inject-gbZGHP5T?
The severity of cisco-sa-umbrella-inject-gbZGHP5T is classified as high due to the potential for formula and link injection attacks.
How do I fix cisco-sa-umbrella-inject-gbZGHP5T?
To fix cisco-sa-umbrella-inject-gbZGHP5T, update Cisco Umbrella to the latest version that addresses these vulnerabilities.
Who is affected by cisco-sa-umbrella-inject-gbZGHP5T?
Authenticated remote users with access to the Admin audit log export and Scheduled Reports features in Cisco Umbrella are affected by cisco-sa-umbrella-inject-gbZGHP5T.
What types of attacks are possible with cisco-sa-umbrella-inject-gbZGHP5T?
cisco-sa-umbrella-inject-gbZGHP5T allows for formula and link injection attacks on affected devices.
What are the potential impacts of cisco-sa-umbrella-inject-gbZGHP5T?
The potential impacts of cisco-sa-umbrella-inject-gbZGHP5T include unauthorized data manipulation and phishing risks through injected links.