CVE-2020-28845 - A CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated user to inject malicious payload in admin's portal thus leads to compromise admin's system

Back Back to CVE browser

HIGH

A CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated user to inject malicious payload in admin's portal thus leads to compromise admin's system

Published Nov 20, 2020

7.8

HIGH

CVSS 3.1

EPSS 1.13%

Description

A CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated user to inject malicious payload in admin's portal thus leads to compromise admin's system.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-1236

References (2)

http://the-it-wonders.blogspot.com/2020/11/netskope-csv-injection-in-admin-ui.html
x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21238
Advisory

Link	Providers	Tags
http://the-it-wonders.blogspot.com/2020/11/netskope-csv-injection-in-admin-ui.html		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21238		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 20, 2020

Updated Aug 4, 2024

Reserved Nov 16, 2020

Link CVE-2020-28845

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-28845

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 20, 2020

Updated Aug 4, 2024

Link EUVD-2020-21238

GitHub

No data