CVE-2020-13247

EUVD-2020-5512
BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
Affected Products (NVD)
VendorProductVersion
booleboxboolebox
𝑥
< 4.2.3.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://app.boolebox.com/release/vulnerabilities/CVE-2020-13247-13248.html
https://members.backbox.org/boolebox-secure-sharing-multiple-vulnerabilities/
https://app.boolebox.com/release/vulnerabilities/CVE-2020-13247-13248.html
https://members.backbox.org/boolebox-secure-sharing-multiple-vulnerabilities/