CVE-2019-16959 - SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket

MEDIUM

SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket

Published Dec 21, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 1.65%

SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket.

No remediation recorded yet.

Weaknesses (1)

CWE-1236

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7437		Advisory
https://support.solarwinds.com/SuccessCenter/s/		x_refsource_MISCProduct
https://www.esecforte.com/formula-injection-vulnerability-india-in-solarwinds-web-help-desk/		x_refsource_MISCExploitThird Party Advisory
https://www.solarwinds.com/free-tools/free-help-desk-software		x_refsource_MISCProduct